adding more than one UIA agent on firewall?

[kchopra01]

Hi Techies,

I have a small doubt whether I can add more than one UIA server in my firewall in the sense that they should behave kind of active passive .

Requirement is something like that I want to secure user id functionality on firewall so that if one of my UIA gets down , then firewall should contact other UIA server for that....

Let me know if we have any solution for it ...

[vsys_remo · Accepted solution]

The UIA reads the windows event logs continuously to provide the most current User-IP mappings to the firewall. The firewall then talks to both UIAs and always uses the most current timestamp for an IP. So lets assume the following:

UIA1: domain\johndoe 20180531-06:10:34 10.10.10.10

UIA2: domain\johndoe 20180531-07:23:26 10.10.10.10

In this case the firewall would have received the mapping first from UIA1. As soon as the new mapping is present on UIA2 the firewall updates it's user-ip-mapping table with the new event from UIA2.

[kchopra01]

Thanks man...i got it now...