Palo Alto Networks Knowledgebase: Error: Failed to connect to User-ID-Agent at x.x.x.x(x.x.x.x):5009

Error: Failed to connect to User-ID-Agent at x.x.x.x(x.x.x.x):5009

7193
Created On 02/07/19 23:46 PM - Last Updated 02/07/19 23:46 PM
User-ID
Resolution

Issue

Connecting to the Terminal Server Agent fails with the following error in the System Logs: "Error: Failed to connect to User-ID-Agent at x.x.x.x(x.x.x.x):5009". This document contains steps to connect the TS Agent to the firewall after receiving this error.

Resolution

Follow these steps if the terminal server agent cannot connect to a firewall.

  1. Verify the configuration, which is explained in the following document How to Install and Configure Terminal Server Agent
  2. Verify that the listening port matches both on the firewall and the Terminal Server Agent.
  3. Verify if the firewall IP's is allowed in the list, if an ACL list is configured for the TS Agent. If the permitted list is configured for the management interface on the firewall, make sure that TS Agent is allowed in the list. Note: By default, these lists allow all IPs if a list is not specified.
  4. Commit the configuration on the firewall.
  5. Disable windows firewall on the machine, which has TS Agent installed to be able to connect to the firewall.

owner: bsyeda



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltaCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language