topic User Mapping - Server Monitoring Issue in General Topics

User Mapping - Server Monitoring Issue

RFloyed — Wed, 05 Jun 2024 12:49:34 GMT

I am currently having an issue with the Server Monitoring.

When I add the DC to this section then under Type: Microsoft Active Directory I want to use the Transport Protocol WinRM-HTTPS but it is only showing WMI and is greyed out.

If I swap the type to Microsoft Exchange I am able to select what I want but I need it to be Active Directory. How do I fix this issue? On my other firewalls I don't have this issue and I am unsure what I am missing.

Attached is a screenshot.

Firewall firmware: 10.2.4-h2

Any help would be greatly appreciated.

Re: User Mapping - Server Monitoring Issue

emr_1 — Thu, 06 Jun 2024 01:30:24 GMT

Even I don't have answer to your question(*), how about trying to configure it via CLI?

*I checked with my PA-5220 v10.2.4-h4, but I could not see the reproduction of issue

FYI:

set user-id-collector server-monitor <name> active-directory
set user-id-collector server-monitor <name> active-directory type <WMI|WinRM-HTTP|WinRM-HTTPS>
set user-id-collector server-monitor <name> active-directory host <ip/netmask>|<value>
set user-id-collector server-monitor <name> exchange
set user-id-collector server-monitor <name> exchange type <WMI|WinRM-HTTP|WinRM-HTTPS>
set user-id-collector server-monitor <name> exchange host <ip/netmask>|<value>

Re: User Mapping - Server Monitoring Issue

T.Mason — Fri, 29 Aug 2025 17:57:51 GMT

I attempted to do this through command line set user-id-collector server-monitor AD-Server active-directory type (WMI is the only valid option). If I try to manually input winrm-http or winrm-https it gives invalid syntax. and says winrmm-https is not one of <wmi>