topic Re: ChatGPT User-ID, AD and IP mapping issue in Next-Generation Firewall Discussions

ChatGPT User-ID, AD and IP mapping issue

P.Auguste — Mon, 17 Nov 2025 15:39:19 GMT

There is an issue with Palo Alto firewall which has to do with user IP mapping and AD. User is grated access via policy in the format source-user = corp\employee. After that's done, the user works fine today accessing ChatGPT but then the user is not able to use chatgpt the next day after working fine the day before. What is the problem? Any insights into this issue/ I've done some preliminary investigation and gathered some information on workaround or possible fix. I'd like to know if anyone else has experience this. I'm thinking there must folks who've experienced this issue because a simple Google search confirmed that issue exists.

Re: ChatGPT User-ID, AD and IP mapping issue

BPry — Mon, 17 Nov 2025 15:57:04 GMT

@P.Auguste,

I'm assuming that they're just losing their user-id mapping from the sounds of things. Have you reviewed your traffic logs and verified what the denied traffic looks like? You might have to temporarily either build out a dedicated rule as a catch-all for denied traffic at the bottom of your rulebase or simply enable logging on the interzone-default policy if you don't have these traffic logs already.

Re: ChatGPT User-ID, AD and IP mapping issue

P.Auguste — Wed, 03 Dec 2025 17:13:30 GMT

Thank you BPry I will look into

Re: ChatGPT User-ID, AD and IP mapping issue

P.Auguste — Wed, 07 Jan 2026 20:02:30 GMT

Based on denied instances I noticed in the traffic log, I had to setup the user twice - domain\firstname.lastname and firstname.lastname. That seems to have resolved the issue. However, this was only for a couple of users. Everyone else had no issue with domain\firstname.lastname.