topic Re: About User-ID Agent in General Topics

About User-ID Agent

young19918 — Mon, 17 Apr 2023 16:51:01 GMT

Hello,

I've been practicing Palo Alto lately, I'm having trouble setting up "User-ID Agent"...
This is my simple structure :

I set up "AD server" and "User-ID Agent" on the same Winserver

I also added Win10 to domain, and gave it an account (michael)

But I don't know why "User-IS Agent" always identify the IP of "michael" as 10.20.54.52 ,instead of 192.168.20.1 which I want...

Any help is appreciate.

Re: About User-ID Agent

BPry — Mon, 17 Apr 2023 16:56:16 GMT

@young19918,

Just from looking at what you have presented, it seems like you're likely performing NAT and you have all of the 192.168.20.1 traffic sourcing as 10.20.54.52 as far as your AD server is concerned. In that event what you're describing makes perfect sense, the AD server won't see the 192.168.20.0/24 network at all.

Re: About User-ID Agent

young19918 — Mon, 17 Apr 2023 17:04:18 GMT

Hi @BPry ,

Thanks for your reply.

I did have NAT turned on, but after I turned it off, everything was fine.