PAN Agent internal, Management interface external

[challenge]

I run a PA-2020 situated in a data centre.

It is the core router and Internet gateway for a very distributed network, mostly Interent VPNs to the PAN itself.

There are a couple of servers co-located with the PAN, connected to its inside interface.

Due to the architecture of the network, I have elected to put the management network on a public IP and restrict via source IP address who can connect.

Now trying to enable User-ID, and have discovered that the firewall connection is initiated from the Management interface, which hence does not have IP connectivity to the internal server.

Various attempts to publish the internal server to a public IP and configure the PAN to use that have so far been unsuccessful.

Any suggestions welcomed as I need to get this working.

PS. Latest software in use on both the PAN and the user agent for Active Directory.

Thanks

Tony

[challenge]

Problem Solved!

Device Tab

Setup

Service Route Configuration

Change uid-agent to use the required (internal) interface