topic Re: User ID Redistribution in General Topics

User ID Redistribution

CraigAddison — Wed, 08 Jun 2022 16:22:39 GMT

Hi,

There seems to be an issue with our internal Palo firewalls and their Data redistribution, I'm not sure how long it's been an issue.

What it should do is redistribute the user authentication events to every firewall so it can use that us the user id in the firewall policy, but this isn't happening. User ID isn't showing across firewalls, like it isn't traversing the network.

Can anyone give me an idea what I need to look at, and why it could be an issue?

Re: User ID Redistribution

OtakarKlier — Wed, 08 Jun 2022 17:11:44 GMT

Hello,

I would say check your config to make sure its setup. Also make sure there are no security policies blocking the traffic.

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-new-features/user-id-features/user-id-redistribution-enhancement

https://docs.paloaltonetworks.com/best-practices/10-1/user-id-best-practices/user-id-best-practices/user-id-best-practices-for-redistribution

Regards,

Re: User ID Redistribution

abhinav2308 — Thu, 31 Oct 2024 08:39:21 GMT

check the following things:
> from where user-id are getting learned. ie - on which FW Ip to user mapping is happening.

> check if the you had enabled the ip to user on the side where you want the redistribution to happen.
Also as mentioned by : OtakarKlie, please check the documents mentioned by him

If you can explain the topology, i think we can help you