topic how to stop sending duplicate user-ip-mapping by xmlapi in Next-Generation Firewall Discussions

how to stop sending duplicate user-ip-mapping by xmlapi

zinkt101 — Mon, 03 Apr 2023 05:58:57 GMT

hello..
we are using UIA and ClearPass (login/loginout type) to get user-ip-mapping.

the issue is Palo Alto firewall is receiving duplicate user-ip-mapping.

user-A (using) : 192.168.1.100 receiving from User ID Agent correctly.

user-B(not using): 192.168.1.100 receving from XMLAPI incorrectly.

user-B ip-user-mapping is sending periodically 45 mins by XMLAPI all days even though it is not using.

should I check in Aurba ClearPass or Palo Alto?

how to remove the duplicate user-ip-mapping?

I have tried clear user-cache ip 192.168.1.100/32 , not worked.

please suggest.

zinkt101 — Tue, 04 Apr 2023 04:55:17 GMT

hello,

anyone please?

TomYoung — Tue, 04 Apr 2023 11:49:14 GMT

If ClearPass is sending the incorrect XMLAPI information, then you need to fix the issue on ClearPass.

Thanks,

Tom