Summary of User-ID Agent to Firewall Communication | Palo Alto Networks Live 4/29/15, 9:49 AM

All Places > Knowledge Base > Documents

Summary of User-ID Agent to Firewall

Communication Version 2

created by nrice on Feb 16, 2011 9:53 AM, last modified by npare on Jun 3, 2012 11:22 AM

Though the communication is constant, there is very little bandwidth used for the trac between the Palo Alto
Networks firewall and the User-ID Agent or PAN-Agent. The summary below indicates the frequency of various
queries:

Every 2 seconds
Get new user/IP mapping from the agent. Used to retrieve new user/IP mapping from the agent.
Send unknown IPs to the agent.

Every 5 seconds, get agent status.

Used as a heartbeat to make sure the connection is still good.

Every 10 minutes
Get changed user/group membership.

Every hour
Get ALL user/IP mapping from the agent. This is used to retrieve all known user/IP mapping from each
agent in case the delta is missed for any reason.

owner: panagent

835 Views Categories: User-ID & Authentication Tags: user-id_agent, configuration, pan_user-id_agent

Average User Rating

(5 ratings)

0 Comments

There are no comments on this document.

1.866.320.4788 Privacy Policy Legal Notices Site Index Subscriptions

Copyright 2007-2015 Palo Alto Networks
https://live.paloaltonetworks.com/docs/DOC-1739 Page 1 of 2
Summary of User-ID Agent to Firewall Communication | Palo Alto Networks Live 4/29/15, 9:49 AM

1.866.320.4788 Privacy Policy Legal Notices Site Index Subscriptions

Copyright 2007-2015 Palo Alto Networks

Home | Top of page | About Jive | Help 2007-2012 Jive Software |

https://live.paloaltonetworks.com/docs/DOC-1739 Page 2 of 2