Agentless User-ID with PAN5.x - AD Configuration

[cindyb]

I have read the tech article "How to Configure Agentless User-ID in PAN- OS 5.0.x"

I'd love to see this document broken into two docs - one that I can send out to customers to prepare for POC - the AD user account setup portion without the PAN firewall config portion . . . does this already exist somewhere?

[dieter_b]

While on the subject: May have been asked before, but what are the advantages/disadvantages of going agentless vs with agent.

How do they compare in terms of reliability (user to ip mapping integrity), performance ?

What does PA recommend ?

[BobW]

At the Ignite conference they talked about the fact that they were able to make the agentless User-ID process very efficient.  Apparently the process is much faster at identifying when a new domain user, or exchange user, logs in.  I suppose it would be handy to have one less piece in the puzzle as well.

Bob

[charger]

Where did you find this tech article? I searched and can't locate it.

M

[SCoupland]

The article can be located here - How to Configure Agentless User-ID in PAN-OS 5.0.x

Personally if I only wanted the customer to setup the user account on the domain and not see the firewall configuration I would write my own version of this with own screenshots so then I could put my own company's branding on the document.