Implementing User Identification via AD

[damir_porobic]

Hi everybody,

I'm trying to implement user identification via active directory on PA-200. I've added the AD server under Device -> LDAP and added group mapping under Device -> User Identification.Now I guess I need to install user-ID agent on a local machine but I can't find a download link for this app.

Is it possible to implement user identification without this user-id agent?

Can anyone provide a simple guide for this whole process? I'm using few documents but wasn't able to find a single document that explains this procedure from start to end on a simple example.

Regards,

Damir

[BlackfenSchool]

Hi Damir

I'm not much help, as I'm trying to figure this out too.  But I did find the User ID Agent software here;

Palo Alto Networks</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /...

[zarina]

Damir,

You need  the agent to get ip to user mapping. You can download the agent from the support portal:

Palo Alto Networks</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /...

This document walks you through the installation procedure for the PANOS 4.1.

https://live.paloaltonetworks.com/docs/DOC-2132

Thanks,

Sri

[BlackfenSchool]

Don't forget to enable user identification on your trusted zone.  I missed that tick box, and spent over an hour trying to figure out why it wasn't working.

[damir_porobic]

Thanks Shaun, I'll try it with this guide, it's actually what I was looking for...