About User-ID Collector with GlobalProtect

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L3 Networker

About User-ID Collector with GlobalProtect

Hello Guys.

As you know that User-ID Collector in Agentless Environment is very useful for USER-ID. I know that User-ID Collector would send only information of user-ip-mapping to other Firewall.

I know that User-ID Collector only send a information of user-ip-mapping from agentless environment to other Firewall.

So I am very curious about User-ID Collector. When GlobalProtect installed environment, Would User-ID Collector send a user-ip-mapping information of GlobalProtect to other Firewall? or not?

Please let me know how User-ID Collector deal with the information of user-ip-mapping from GlobalProtect.

Thanks.

Regards,

Roh


Accepted Solutions
Highlighted
L4 Transporter

Hello,

Yes, the User-ID collector firewall will pass on the user-ip-mappings(incl. captive portal & global protect). On the collector you will see the GP ip-mappings as learnt from UIA instead of GP.

Refer:

GlobalProtect Users Appear as Coming From User-ID Agent in IP-User Mapping

How to Configure and Verify User-ID Collector in PAN-OS 5.0

Hope that helps,

Aditi

View solution in original post


All Replies
Highlighted
L4 Transporter

Hello,

Yes, the User-ID collector firewall will pass on the user-ip-mappings(incl. captive portal & global protect). On the collector you will see the GP ip-mappings as learnt from UIA instead of GP.

Refer:

GlobalProtect Users Appear as Coming From User-ID Agent in IP-User Mapping

How to Configure and Verify User-ID Collector in PAN-OS 5.0

Hope that helps,

Aditi

View solution in original post

Highlighted
L3 Networker

Hi Aditi,

Thank you very much.

I solved the issue from your answer and It's a very cool feature for User-ID deployment :smileyhappy:

Have a nice day!

Thanks again.

Regards,

Roh

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!