Error User-id agent Paloalto

Alpalo — Tue, 27 Jun 2023 14:28:48 GMT

Good morning, we recently updated the version of user-id agent on our servers. We have 2 UID agents and several DC's...

In the agents with the new version, we constantly get a reconnection log with one of our DCs. (Virtual Machine W2019) We also have other DC on this UID without this alerts....We only have alerts between this DC and both UIDs agents.

UID agents version 10.2.1

We have been looking at the following recommendation:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClwzCAC

But we have already applied it and the same error continues.

Any idea?

Thanks

We have checked the network configuration and even restarted the DC without success.

Re: Error User-id agent Paloalto

BPry — Tue, 27 Jun 2023 15:49:21 GMT

@Alpalo,

Have you verified that your agent server and the DCs are all at the same patch level? Have you verified that the DC is actually writing Logon/Logoff events to the security event logs and that this setting wasn't accidently disabled.

topic Error User-id agent Paloalto in General Topics

Error User-id agent Paloalto

Re: Error User-id agent Paloalto