user-id agent connection issues

[ajripa]

Hi,

We are trying to connect our PAN 2050 OS 4.0.9 to a couple of user-id agent version 4.1.3. The connection is not established and the agent logs reports:

Device thread 1 SSL no certificate

Device thread 1 reply ver 5 msg with max ver 5, msg type 6

Failed to read message msg header. error -1

Device thread 1 SSL shutdown

The PAN "show user userid-agent statistics" reports:

Connection                                        : Not Connected        Version                                           : <Unknown>        number of connection tried                        : 41788        number of connection succeeded                    : 0        number of connection failed                       : 41788        number of user ip mapping messages received       : 0        number of user ip mapping add entries received    : 0        number of user ip mapping del entries received    : 0        number of ip msgs rcvd but failed to process      : 0        number of status messages received                : 0        number of request of ip mapping messages sent     : 0        number of request of all ip mapping messages sent : 0        number of request of status messages sent         : 0

Any clue? Thanks!

[rmonvon · Accepted solution]

Hi...The agent is not backward compatible, but PANOS is. You can use PANOS 4.0 with a 3.1 agent, but not the other way around.  Thanks.