User-ID agent , custom agent sequence or agent priority.

[KiCheon.Lee]

Hello,

I know PANOS-5.0 provide custom agent sequence function.

Does PANOS-4.1  have same function such as custom agent sequence or agent priority???

I use two User-ID agent.

Does Palo Alto Device receive ip-user mapping information from all(two) agents or one agent?????

If it receive information from one agent, how way do I check device receive what agent????

Thanks.

[sdurga · Accepted solution]

Customer agent sequence is not present in 4.1. If you have more than one User-Id agents configured in 4.1, then the firewall pulls the user-ip info from all of the agents.

Tx,

Sandeep T

[KiCheon.Lee]

Thanks sdurga.

I have more question.

If I upgrade PANOS-5.0 and configure 'custom agent sequence' for two agents.

Agent#1 is priority high and Agent#2 is priority low.

Does FW pull the user-ip info only Agent#1?

If between  FW and Agent#1 disconnect then they connect again.

Does FW still pull the user-ip info only Agent#2 or roll back Agent#1 such as preemptive function???