12-09-2013 02:20 PM
So Server 2012 has been out over a year, and neither the standard User-ID agent or the Terminal Server Agent support it. Has anyone got a workaround (short of using 2008R2 server)?
12-10-2013 01:43 AM
User-ID agent can be installed on 2012 without problems and is running fine but without support from PANW. TS-Agent on 2012 is also not yet supported at this time and harder to install, you have to use the windows compatibility mode for a successful installation. I have several running requests with our local PANW SEs regarding Win 2012 support for the Agents, until now without any concrete response. I guess support will (and must) be availble in the 6.0 agents which is beta at this time but unfortunately without available beta release notes...
12-10-2013 09:13 AM
As TAC support for UID agent running on Windows 2012 is not available, you can adopt the agentless approach for user-identification. In that way, you can avoid the use of UID agent itself.
Configuration for Agentless UID setup:
How to Configure Agentless User-ID in PAN-OS 5.0.x
Also for Terminal Server agent on Windows 2012, I do see a feature request (FR ID : 3062) submitted to our content development team. You too can request your account's SE to vote for it.
Thanks and regards,
04-07-2017 02:33 AM
The TS Agent used to run fine on Windows Server 2012, although you'd have to right-click the MSI package to enable "compatibility mode for previous Windows versions" first.
But PAN OS .0 requires TS Agent 8.0. That versions installs, and everything looks fine. The PANs communicate, the agent shows users with port ranges, the debug.log document shows no problems, the firewall sends requests - and never receives answers. Something's broken. Ouch...
If anyone has a workaround or a better way of diagnosis?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!