Hello, I have previously asked support about this since we have considered using agentless user-id in a large deployment. Here are the numbers that I got: It depends on a few things. It depends on the number of DCs that are involved and the type of device the customer is using. If its a 500 series you should be fine monitoring up to 10 servers. Same is true for a 200 series. The 2000 series has only little memory in the management plane, which is why I would possibly only monitor 2-5 servers. Other devices like the new 3000 series or the 5000 series have more memory in the management plane. Meaning monitoring up to 50 servers should work fine." So the limitation is not the number of users but number of DCs that is monitored. As for your installation you should be fine with using agentless installation, but remember if you got "slow" links between the PA and the DC's you should consider installing the user-id agent. Jo Christian
... View more