User Identification Agent

[patrickproy]

I have forget to start/restart service, before configure so I have this message : "Please start the PanAgent service first" in status agent.

When I click on "start", this message display:

Impossible de démarrer le service PanAgent Service sur Ordinateur local.

Erreur 1069: l'échec d'une ouverture de session a empêché le démarrage du service

What can I do ?

I can delete informations on "configure agent".

Please help me

[swhyte]

Hello Patrick,

Please verify that the user that you used to log onto the machine that the user identification agent is installed on, has adequate privelleges to run the pan agent service. Try logging on to the machine as local admin.

[fw_admin]

Hi,

We've had this problem too. We've been able to fix it, by means of administrator rights in the machine for the user who executes the PanAgenController.exe and besides we execute this programs with "run as administrator". This has been the only way to solve it.

Nevertheless, we're still seeing a strange message in the Show Information Window, the Agent Status says "Cannot open security log" sometimes.

Regards,

[swhyte]

If your pan agent is configured to read the security logs of multiple domain controllers and the user that you are using for the pan agent service does not have adequate priveledges to read the security log of one or more of the domain controllers, then you will still get that "cannot open security log" error.

[harish]

Configure your PanAgentService to "Log on as:" domain\administrator account and restart the service.

[jickfoo]

I have this same issue but dont want to put domain admin accounts in services. Anyone know what permissions I can add to the account short of making them domain admin ?

[bpappas]

Your Pan Agent service will need to be able to "manage" and "audit" the security event log on the DCs to pick up the logon events from the security event logs.

-Benjamin

[jickfoo]

Any documentation on how to do this in Active Directory ? Is there a prebuilt domain role that would provide this functionality ? Server Operators anything like that ?

Thanks.

[mderksen]

Have you seen this one:

https://live.paloaltonetworks.com/docs/DOC-1166

Marcel

[jickfoo]

no I hadn't, thats perfect, thank you