About User-ID Collector with GlobalProtect

[RohJaewoong]

Hello Guys.

As you know that User-ID Collector in Agentless Environment is very useful for USER-ID. I know that User-ID Collector would send only information of user-ip-mapping to other Firewall.

I know that User-ID Collector only send a information of user-ip-mapping from agentless environment to other Firewall.

So I am very curious about User-ID Collector. When GlobalProtect installed environment, Would User-ID Collector send a user-ip-mapping information of GlobalProtect to other Firewall? or not?

Please let me know how User-ID Collector deal with the information of user-ip-mapping from GlobalProtect.

Thanks.

Regards,

Roh

[apasupulati · Accepted solution]

Hello,

Yes, the User-ID collector firewall will pass on the user-ip-mappings(incl. captive portal & global protect). On the collector you will see the GP ip-mappings as learnt from UIA instead of GP.

Refer:

GlobalProtect Users Appear as Coming From User-ID Agent in IP-User Mapping

How to Configure and Verify User-ID Collector in PAN-OS 5.0

Hope that helps,

Aditi

[RohJaewoong]

Hi Aditi,

Thank you very much.

I solved the issue from your answer and It's a very cool feature for User-ID deployment

Have a nice day!

Thanks again.

Regards,

Roh