PAN Agent Settings

[network]

We are implementing the PAN User ID agent and we were wondering what everyone else was doing.. did you just leave it as the defaults?

[dagibbs]

Hi.

I modified the "Age time out" string to a much higher value because I have a high percentage of users who logon to a machine then stay logged in for 10-12 hours, which means the entry in the Security log will be not be refreshed in the 45 minute default.

I also enabled "WMI" probing for unknown users rather than Netbios.

Apart from that, I left the settings at the default.

Cheers.

[rahmant]

Just for warning, you should probably check with support before modifying anything

We had to modify the security log timers from 1 sec to 120 secs, as the agent was bombarding our WAN connections with query traffic.

Tariq