about agentless user-id in panos-5.0

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

about agentless user-id in panos-5.0

L4 Transporter

Hello

I have a questions about agentless user-id in panos-5.0.

I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1.

Are these time values same in PANOS-5.0?

If it is right,

Do user ip mapping in MP run instead of agent role in PANOS-4.1? Are MP cache times 45minutes(default)?

and Do user ip mapping in DP run instead of  FW role in PANOS-4.1? Are DP cache times also 1 hour(default)?

Thanks

1 accepted solution

Accepted Solutions

L5 Sessionator

Hi Cheon,

The same timers apply to the PANFWs running on 5.0, having the agentless service configured. Please find below the docs that explain about the timers on the PANFW ( and it applies to both the agent and the agentless services )

https://live.paloaltonetworks.com/docs/DOC-4551

I hope this helps.

BR,

Karthik RP

View solution in original post

4 REPLIES 4

L5 Sessionator

Hi Cheon,

The same timers apply to the PANFWs running on 5.0, having the agentless service configured. Please find below the docs that explain about the timers on the PANFW ( and it applies to both the agent and the agentless services )

https://live.paloaltonetworks.com/docs/DOC-4551

I hope this helps.

BR,

Karthik RP

Thanks, kprakash.

Are there both ip-user-mapping info on DP and ip-user-mapping-mp info on MP when make user-id with user agent??

Hi Cheon,

Yes, we have the mappings on both the management plane and the data-plane. Hope that helps!

BR,

Karthik

You can view the MP mappings through:

> show user ip-user-mapping-mp all

DP mappings:

>  show user ip-user-mapping all

  • 1 accepted solution
  • 2691 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!