Configure Syslog from a Cisco Device

by
  • Ensure time and date set correctly
clock timezone AEST 10 0
ntp server pool.ntp.org
  • Verify Clock Output
Router#show clock
10:48:06.315 AEST Mon Dec 3 2018
  • Configure Syslog
service timestamps debug datetime msec
service timestamps log datetime msec
service sequence-numbers

logging buffered 30000000 (Set this as you desire)
no logging console
no logging monitor

logging trap debugging
logging host xxx.xxx.xxx.xxx or logging.domain.com

Setup Agentless User-ID

by
  • Create a new domain user and assign the user to the following builtin groups.
Distributed COM Users
Event Log Readers
Server Operators
  • Domain Administrator Privileges are not required
  • Login to Each Domain Controller you wish to use for User-ID and perform the following under MMC > WMI Control
  • Add the WMI Control Snapin for the local computers and right click on WMI Control (local) and select properties
  • Edit the Security settings for CIMV2 by adding your new domain user with the following:
Enable Account
Remote Enable
  • Repeat for all domain controllers you wish to monitor
  • Under Device > User Identification > User Mapping select the cog next to “Palo Alto Networks User-ID Agent Setup”
  • Enter the created user accounts credentials
  • Under the server monitoring tab add your Domain Controllers
  • Commit your changes
  • Verify User ID by entering the following in SSH Command Line
show user ip-user-mapping all
  • This will return the users currently associated with User ID

Windows Server Allow Downloads

by
  • When attempting to download files the following error appears
  • Head to Settings > Internet Options
  • Select Custom Level in the “Internet Zone”
  • Set “File Download” to Enable. This does not require a restart of IE

Disclaimer: It is obviously not recommended to enable this setting however circumstances such as connectivity and file size might make downloading it on another computer impractical. Enable this setting after you have finished with it.