Several Terminal Servers User-ID

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

Several Terminal Servers User-ID

L3 Networker

Hi,

We are implementing User ID.

We have around 5 machines where we have Windows based user id agents installed and running smoothly.

Now we have around 150 terminal servers - including windows server editions, jumphosts etc. - where multiple users can login at the same time. So:

 

1) Do we have to deploy TS Agent for user identification on all these? If yes is there a simpler way rather than manual install on all of these and then configuring them?

 

2) Is there any other way to get this user mapping for multiple user without installing TS Agent?

 

Just confused how to manage such a huge number!

Thanks!

1 accepted solution

Accepted Solutions

L7 Applicator

Hi @rjdahav163 

Yes, you have to install the terminal server agent on all of these servers where you have more than one user logged in at the same time. You could deploy the agent by gpos or sccm for example. As long as you do not write your own terminal server agent software which then also needs to be installed on all server, there is no other way.

 

PS: installing global protect like proposed by @laurence64 will not work. Ok, you can install it of course, but you won't get the user-ip-port-mappings you need.

View solution in original post

3 REPLIES 3

L4 Transporter

Could you possibly deploy global protect ?

PCCSA PCNSA PCNSE PCSAE
Mode44 LTD Palo Alto Consultants

L7 Applicator

Hi @rjdahav163 

Yes, you have to install the terminal server agent on all of these servers where you have more than one user logged in at the same time. You could deploy the agent by gpos or sccm for example. As long as you do not write your own terminal server agent software which then also needs to be installed on all server, there is no other way.

 

PS: installing global protect like proposed by @laurence64 will not work. Ok, you can install it of course, but you won't get the user-ip-port-mappings you need.

Yes Absolutly as @Remo says you will have to install the TS agent, apologies for the quick inaccurate reply!

PCCSA PCNSA PCNSE PCSAE
Mode44 LTD Palo Alto Consultants
  • 1 accepted solution
  • 3101 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!