for what purpose would the management interface use msrpc?

cancel
Showing results for 
Search instead for 
Did you mean: 

for what purpose would the management interface use msrpc?

Not applicable

the mgmt interface on a 3050 is reaching out to a number of internal host over msrpc (tcp/135). i've not been successful in discoving the purpose of this via the admin guide - is anyone else seeing this behavior?

thx,

tommyluke

1 ACCEPTED SOLUTION

Accepted Solutions

Hello Tom,

What I meant was, we haven't seen any problems/ issues per say - after enabling 'Client Probing' in Agentless setup.  It just that we saw un-wanted WMI probes from the User-ID function on port 135.

In fact after further investigation, it looks like the issue has been taken care of in PANOS - 5.0.7  and you can verify that in its release notes by 52967.

Regards,

Kunal Adak.

View solution in original post

3 REPLIES 3

L5 Sessionator

Hello Tom,

Do you have Agentless UserID configured on your firewall? If so, we need to make sure that we disable Client probing under Device > User Identification > User Mapping > Client probing tab.

Regards,

Kunal Adak

Thank you kadak. You are correct, I have agentless userid configured. I imagine that, were I to disable client probing, the msrpc data from the management ip would cease. When you stat that we need to "make sure that we disabled client probing" is that because you have experienced problems with client probing?

best,

tommy

Hello Tom,

What I meant was, we haven't seen any problems/ issues per say - after enabling 'Client Probing' in Agentless setup.  It just that we saw un-wanted WMI probes from the User-ID function on port 135.

In fact after further investigation, it looks like the issue has been taken care of in PANOS - 5.0.7  and you can verify that in its release notes by 52967.

Regards,

Kunal Adak.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!