Can't enable user-id on sd-wan zones

MortenKongsted — Wed, 30 Nov 2022 08:31:18 GMT

I need to enable user-id on panos sdwan zones - e.g. zone-to-branch. I can enable it in the template on panorama, but it doesn't change on the firewall when pushed. Everything else is working fine, so this is not and template/stack issue. Is this a sdwan issue or work as expected?

Re: Can't enable user-id on sd-wan zones

kiwi — Tue, 06 Dec 2022 09:37:59 GMT

Hi @MortenKongsted ,

Which PAN-OS version are you running ?

Sounds like you might be running into issue PAN-155459 which was fixed in 9.1.10 and 10.0.2

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-addressed-issues/pan-os-9-1-10-addressed-issues

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-release-notes/pan-os-10-0-addressed-issues/pan-os-10-0-2-addressed-issues

As a possible workaround you could make a local override on the firewall by enabling User ID locally to see if that works for you.

Kind regards,

-Kiwi

topic Can't enable user-id on sd-wan zones in General Topics

Can't enable user-id on sd-wan zones

Re: Can't enable user-id on sd-wan zones