about agentless user-id in panos-5.0

[KiCheon.Lee]

Hello

I have a questions about agentless user-id in panos-5.0.

I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1.

Are these time values same in PANOS-5.0?

If it is right,

Do user ip mapping in MP run instead of agent role in PANOS-4.1? Are MP cache times 45minutes(default)?

and Do user ip mapping in DP run instead of  FW role in PANOS-4.1? Are DP cache times also 1 hour(default)?

Thanks

[kprakash · Accepted solution]

Hi Cheon,

The same timers apply to the PANFWs running on 5.0, having the agentless service configured. Please find below the docs that explain about the timers on the PANFW ( and it applies to both the agent and the agentless services )

https://live.paloaltonetworks.com/docs/DOC-4551

I hope this helps.

BR,

Karthik RP

[KiCheon.Lee]

Thanks, kprakash.

Are there both ip-user-mapping info on DP and ip-user-mapping-mp info on MP when make user-id with user agent??

[kprakash]

Hi Cheon,

Yes, we have the mappings on both the management plane and the data-plane. Hope that helps!

BR,

Karthik

[zarina]

You can view the MP mappings through:

> show user ip-user-mapping-mp all

DP mappings:

>  show user ip-user-mapping all