07-28-2014 01:59 AM
Hi,
At this moment we user Userd-ID agents on our WIndows Server 2008 R2 AD servers. But we want to upgrade all the servers to Windows Server 2012 R2. Does Palo Alto already support userd-ID agents on Windows Server 2012 R2 and what firmware needs to be installed on the firewall?
07-28-2014 02:17 AM
Hi Zebit
Please read tech doc from PAN6.0.3 there is information:
USER IDENTIFICATION FEATURES
• Windows Server 2012 Support for User-ID/Terminal Server Agents—(Supported as of PAN-OS 6.0.2) You can now install the Windows-based User-ID agent or Terminal Server agent on a system running the Microsoft Windows Server 2012 operating system. The User-ID agent that runs on the firewall can also integrate with Windows Server 2012 for user mapping and group mapping. The procedures to install the User-ID agent and configure mappings are the same as for servers supported in earlier releases (Windows Server 2003 and 2008).
You can download it from https://support.paloaltonetworks.com/Updates/SoftwareUpdates/8702
IMHO 6.0.3 PAN OS is a first that support Windows 2012 on User-id feature but few peoples reported that on erlier version than UaInstall-6.0.2-3.msi it works. Please search this community for more details.
With regards
Slawek
07-29-2014 03:04 AM
But as we have Windows Server 2012 R2 and this is not in the list, I need to wait.
07-29-2014 03:27 AM
ooops, I missed "R2" - sorry
08-07-2014 09:33 AM
Hi Zebit
From 6.0.4 relase notes:
USER IDENTIFICATION FEATURES
• Windows Server 2012/2012 R2 Support—(Supported as of PAN-OS 6.0.3) You can now install the Windows-based User-ID agent on a system running the Windows Server 2012/2012 R2 operating system (OS) and you can now install the Terminal Server agent on a system running the Microsoft Windows Server 2012 R2 operating system. The User-ID agent that runs on the firewall can also integrate with Windows Server 2012/2012 R2 for user mapping and group mapping. The procedures to install the User-ID agent and/or Terminal Server agent and configure user mapping are the same as for servers supported in earlier releases (Windows Server 2003 and 2008).
I hope that it's a good news for You 
Regards
SLawek
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
