topic Re: User ID agent issues, one user logs off, another user "logs in" a gets the previous users ip address", times out eventually in General Topics

User ID agent issues, one user logs off, another user "logs in" a gets the previous users ip address", times out eventually

tstores — Fri, 18 Jan 2013 19:27:44 GMT

3 questions:

Why does the Agent (and PAN) not get updated when a new user logs in?

What is the purpose of the “Enable user Identification Timeout” and the corresponding “User Identification Timeout (min.)” in the Agent? What will be the result if we disable this setting altogether? We do not use NetBIOS or WMI probing at this time.

User Identification Timeout is enabled and set to 180 min our agent. We believe this is why there was a 3 hour delay, but since the agent is updated from the AD logs every 5 seconds, I do not see the point in this setting. What is its intent? We plan to change it to 5 min. What will be the effect if we just disable it? "User Identification Timeout" provided no results in the support portal.

Re: User ID agent issues, one user logs off, another user "logs in" a gets the previous users ip address", times out eventually

scantwell — Tue, 22 Jan 2013 03:35:48 GMT

I believe that the User Timeout settings determines how long the Agent will retain the User to IP mapping.

Typically it is recommended to keep this number at 1/2 of your DHCP lease time.

The reason is that the DHCP standard has users asking for their DHCP address ever 1/2 of their lease time.

So a user with a lease time of 16 hours, would have its DHCP address renewed at the 8 hour mark.

So if you configure your Timeout value to match 8 hours, when the user retains (or obtains a new IP address), the UserID mapping is now also updated.

There are many docs written that describe the UserID functionality, but do not specifically call out the User Identification Timeout value.

I had a to read a few of the docs to put it all together.

Hope this helps.

Re: User ID agent issues, one user logs off, another user "logs in" a gets the previous users ip address", times out eventually

sjamaluddin — Tue, 29 Jan 2013 23:22:52 GMT

User Identification Timeout is set so that you may flush out older entries.

Typically you do want to set a Timeout value, even though when a new user logs into a particular IP address, the user to ip mapping will be created for that user (and the older user at that IP address may have logged out already)

The UserID agent does not track log out events so unless there is a timeout value set, you could potentially have an indefinite entry for a user / ip mapping and use up all the memory resources over time.

Hope this helps.

The following Tech Note has helpful info.