Windows Server 2012 Terminal Server Agent

[telxoid]

So Server 2012 has been out over a year, and neither the standard User-ID agent or the Terminal Server Agent support it.  Has anyone got a workaround (short of using 2008R2 server)?

[indup089]

Hi,

User-ID agent can be installed on 2012 without problems and is running fine but without support from PANW. TS-Agent on 2012 is also not yet supported at this time and harder to install, you have to use the windows compatibility mode for a successful installation. I have several running requests with our local PANW SEs regarding Win 2012 support for the Agents, until now without any concrete response. I guess support will (and must) be availble in the 6.0 agents which is beta at this time but unfortunately without available beta release notes...

CU

[kadak]

Hello,

As TAC support for UID agent running on Windows 2012 is not available, you can adopt the agentless approach for user-identification. In that way, you can avoid the use of UID agent itself.

Configuration for  Agentless UID setup:

How to Configure Agentless User-ID in PAN-OS 5.0.x

Also for Terminal Server agent on Windows 2012, I do see a feature request (FR ID : 3062) submitted to our content development team. You too can request your account's SE to vote for it.

Thanks and regards,

Kunal Adak

[Jeroen.Scheerder]

The TS Agent used to run fine on Windows Server 2012,  although you'd have to  right-click the MSI package to enable "compatibility mode for previous Windows versions" first.

But PAN OS .0  requires TS Agent 8.0.  That versions installs, and everything looks fine.  The PANs communicate, the agent shows users with port ranges, the debug.log document shows no problems, the firewall sends requests - and never receives answers.  Something's broken.  Ouch...

If anyone has a workaround or a better way of diagnosis?