topic Re: "source user" empty in monitor log in General Topics

"source user" empty in monitor log

JimMcGrady — Mon, 18 Nov 2019 06:29:47 GMT

I'm looking at an old version 7 PA3000 which uses a user-id agent to map users (active directory) to IP addresses.

When i log onto the firewall CLI a "show user ip-user-mapping-mp all" command returns what looks to be a valid list of user mappings. However 90% of the traffic log entries have 'source user' blank. There doesnt seem to be a reason why the remaining 10% are displaying correctly. Some clients from a given subnet passing through a rule are identified and others arent. Any troubleshooting suggestions would be appreciated.

Re: "source user" empty in monitor log

Mick_Ball — Mon, 18 Nov 2019 11:20:11 GMT

@JimMcGrady , Hi.

what is the identification timeout set to... you may need to increase it if not much domain activity is going on....

Re: "source user" empty in monitor log

OtakarKlier — Mon, 18 Nov 2019 16:52:48 GMT

Hello,

Also make sure the zone has User-ID enabled.

Regards,

Re: "source user" empty in monitor log

xhasing — Tue, 11 Aug 2020 19:47:09 GMT

Yo tuve el mismo problema, lo pude resolver agregando todos mis servidores de directorio activo, ya que tengo un arbol de servidores y tenía agregado solo los principales. Cabe indicar que el timeout lo tengo deshabilitado.

Re: "source user" empty in monitor log

cristian.perez3 — Thu, 16 Oct 2025 04:41:51 GMT

Thanks, this comment save me life