topic Re: Intermittent User-ID with eDirectory in General Topics https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24120#M17578 <HTML><HEAD></HEAD><BODY><P>That does sound odd. With this issue, however, I would advise calling into Support so that we can debug further with you.</P></BODY></HTML> Tue, 11 Oct 2011 16:58:33 GMT gswcowboy 2011-10-11T16:58:33Z Intermittent User-ID with eDirectory https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24119#M17577 <HTML><HEAD></HEAD><BODY><P>We're on a PA2050, v4.0.5 using eDirectory Agent 3.1.2 (Windows 2008 srvr) connected to two eDirectory servers v.8.8.5.</P><P></P><P>Users are being identified on the PA, but not all packets or sessions are showing a userid.</P><P></P><P>If I filter a single busy source IP in the traffic log, over the span of a couple of seconds I might see 80% of packets with the 'SourceUser' identified and the remainder blank. (varies)</P><P></P><P>The effect of this is that if we try to enforce a rule to block unauthenticated users, internet access becomes unreliable for many users on the network.</P><P></P><P>The system log shows the PA connecting to LDAP source every 120s as configured.</P><P></P><P>Any ideas? Thanks.</P></BODY></HTML> Tue, 11 Oct 2011 15:46:09 GMT https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24119#M17577 Retired Member 2011-10-11T15:46:09Z Re: Intermittent User-ID with eDirectory https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24120#M17578 <HTML><HEAD></HEAD><BODY><P>That does sound odd. With this issue, however, I would advise calling into Support so that we can debug further with you.</P></BODY></HTML> Tue, 11 Oct 2011 16:58:33 GMT https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24120#M17578 gswcowboy 2011-10-11T16:58:33Z Re: Intermittent User-ID with eDirectory https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24121#M17579 <HTML><HEAD></HEAD><BODY><P>Were you able to get this resolved?</P><P></P><P>-Renato&nbsp;&nbsp;&nbsp;&nbsp; </P></BODY></HTML> Thu, 13 Oct 2011 03:50:18 GMT https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24121#M17579 gswcowboy 2011-10-13T03:50:18Z Re: Intermittent User-ID with eDirectory https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24122#M17580 <HTML><HEAD></HEAD><BODY><P>No. I was off sick. I'll call it in ASAP.</P></BODY></HTML> Fri, 14 Oct 2011 14:45:39 GMT https://live.paloaltonetworks.com/t5/general-topics/intermittent-user-id-with-edirectory/m-p/24122#M17580 Retired Member 2011-10-14T14:45:39Z