Windows Server 2012 Terminal Server Agent

Reply
Highlighted
Not applicable

Windows Server 2012 Terminal Server Agent

So Server 2012 has been out over a year, and neither the standard User-ID agent or the Terminal Server Agent support it.  Has anyone got a workaround (short of using 2008R2 server)?

Highlighted
L2 Linker

Hi,

User-ID agent can be installed on 2012 without problems and is running fine but without support from PANW. TS-Agent on 2012 is also not yet supported at this time and harder to install, you have to use the windows compatibility mode for a successful installation. I have several running requests with our local PANW SEs regarding Win 2012 support for the Agents, until now without any concrete response. I guess support will (and must) be availble in the 6.0 agents which is beta at this time but unfortunately without available beta release notes...

CU

Highlighted
L5 Sessionator

Hello,

As TAC support for UID agent running on Windows 2012 is not available, you can adopt the agentless approach for user-identification. In that way, you can avoid the use of UID agent itself.

Configuration for  Agentless UID setup:

How to Configure Agentless User-ID in PAN-OS 5.0.x

Also for Terminal Server agent on Windows 2012, I do see a feature request (FR ID : 3062) submitted to our content development team. You too can request your account's SE to vote for it.

Thanks and regards,

Kunal Adak

The TS Agent used to run fine on Windows Server 2012,  although you'd have to  right-click the MSI package to enable "compatibility mode for previous Windows versions" first.

 

But PAN OS .0  requires TS Agent 8.0.  That versions installs, and everything looks fine.  The PANs communicate, the agent shows users with port ranges, the debug.log document shows no problems, the firewall sends requests - and never receives answers.  Something's broken.  Ouch...

 

If anyone has a workaround or a better way of diagnosis?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!