User-id & group information miss mapping issue

JoHyeonJae — Mon, 25 Jul 2022 01:31:10 GMT

Hello,

I faced user-id and group information miss mapping issue in active/active configuration.

However, I couldn't find the problem, so I need your advice.

Device info:

Device : PA-3220

PAN-OS : 9.1.11-H3

Active-Active, V-wire

Currently, we receive user information through the aruba clearpass and xml-api linkage.

There is no group setting on the device and all information is received from clearpass.

Clearpass is linked with the active-primary device (FW_1) and FW_2 is receiving data through synchronization from Unit 1.

The user-id and group information are normal for Unit 1, which is an device linked to the aruba clear pass, but Unit 2 has abnormal mapping. (occurs in some users)

Do you know anything about this issue?

I couldn't find any related bugs were found.

Thanks and regards

Re: User-id & group information miss mapping issue

aleksandar.astardzhiev — Mon, 08 Aug 2022 13:02:56 GMT

Hi @JoHyeonJae ,

Can you please clarify what do you mean by "abnormal mapping"?

It is not very clear what problem you are experiencing - with user-ip-mapping or with group-mapping?

topic User-id & group information miss mapping issue in Next-Generation Firewall Discussions

User-id & group information miss mapping issue

Re: User-id & group information miss mapping issue