User Identification Agent with Active Directory

[a.cadarso]

I know that PA Firewall uses MGT interface to connect to user Identification Agent, I know that most of the other services can be set to use any other interface with the "Service Route Configuration" commands.

Is there any method to use any other interface as a source for communication with User Identification Agent?

Thanks in advance

[migration · Accepted solution]

Hi,

Actually, you *can* use the Service Route setting to route communications to the User-ID Agent.

In the Service Route Configuration dialog, make sure that you have selected "Show Destinations" at the lower

left hand corner of the dialog. You will see a Destination table on the right with IP/FQDN and Source Address mappings.

At the bottom, there will be a place to add additional mappings.

In the "IP Address or FQDN" field, enter the IP address of your system where the User-ID Agent is installed.

Then, pull down available interfaces on your device and select the appropriate source IP address.

[rps]

Are there any internal downside of using this method to get data for the pan-agent or ts-agent?

I mean to "force" route it through the dataplane?