topic Re: How to see uesr-ip mapping in panorama GUI? in General Topics

How to see uesr-ip mapping in panorama GUI?

saswins — Sat, 22 Jan 2022 22:57:34 GMT

I know there is this CLI command "show user ip-user-mapping-mp all" to view all user-ip mapping Just wondering if this info is shown anywhere in GUI

Thanks,

Re: How to see uesr-ip mapping in panorama GUI?

PavelK — Sun, 23 Jan 2022 02:20:20 GMT

Thank you for the post @saswins

If your Firewall is configured to send User-ID information to Panorama under: Device > Log Settings > User-ID > [Select Panorama check box], then you will be able to see Use-ID log in Panorama under: Monitor > Logs > User-ID.

The information you get from this log is almost identical what you can see directly from Firewall's CLI.

Kind Regards

Pavel

Re: How to see uesr-ip mapping in panorama GUI?

saswins — Mon, 24 Jan 2022 04:12:35 GMT

No Monitor > Logs > User-ID.I will the historic logs not the live user-ip mapping(meaning current active users)

Re: How to see uesr-ip mapping in panorama GUI?

PavelK — Mon, 24 Jan 2022 07:31:41 GMT

Thank you for reply @saswins

If you need current active user IP mapping in Panorama, your only option is to set up Panoram for User-ID redistribution. Below is the reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/user-id-redistribution-using-panorama.html

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/redistribute-user-id-information-to-managed-firewalls

This will however not give you any option in GUI. You will still have to get that information from CLI by: show user ip-user-mapping-mp

Kind Regards

Pavel

Re: How to see uesr-ip mapping in panorama GUI?

saswins — Mon, 24 Jan 2022 07:33:21 GMT

ok got it

Re: How to see uesr-ip mapping in panorama GUI?

Gustavo_Aristi — Mon, 24 Jan 2022 22:19:05 GMT

In short, the answer to your question is no. Only via CLI you can view the user-IP mapping table.

You might be able to pull this off via the API.

To try, you can go to: https://yourFWIP/php/rest/browse.php/user-id

Let me know if you figure it out (if you are interested to go that route).

Thanks.