User-ID Agent

[VSU_ITSEC]

hello.... Can a User-ID Agent connect to more than one firewall?

if so, how do you set up the other ones?

[jburugupalli]

Hello.

One user-id agent can talk multiple firewalls simultaneously.

Follow below steps to make firewall communicate with User-ID agent:

1. Log into the Palo Alto Networks firewall and go to Device > User Identification
2. Configure Name, Host (IP address) and Port of the User-ID Agent.
3. Enable user identification on each zone to be monitored.  On the Network > Zone page, edit the appropriate zones. In the bottom left corner of the Zone properties page, check the box for Enable user identification.
4. Commit the changes.

For more information please refer the below link:

Architecting User Identification Deployments

Regards,

Jahnavi.

[VSU_ITSEC]

wow.. that's the part i missed...

thank you!