url filtering with groups moved user

GBGHFWSupport — Mon, 30 Jan 2012 19:08:46 GMT

I have 2 surfing policies one referencing group1 the other group2

if I move a user from group 1 to group 2 he is still restricted by the group 1 policies

how do I force the panagent to look again and get the list of group to user again

Re: url filtering with groups moved user

mikand — Mon, 30 Jan 2012 22:32:39 GMT

I guess you have already seen following docs?

User Identification with PAN-OS 4.0
https://support.paloaltonetworks.com/index.php?option=com_pan&task=dl_tech_doc&filename=User-Identification-Operations-4.0.pdf

User-ID Upgrade (4.1)
https://support.paloaltonetworks.com/index.php?option=com_pan&task=dl_tech_doc&filename=User-ID_Upgrade_4.1-RevB.pdf

According to the above docs there is an Update Interval for some settings which defaults to 3600 seconds (1 hour).

This setting can be manually altered for values between 60-86400 (1min - 1day).

So in your case (as a test) try to lower it to at least 300 (seconds).

The point here is that the agent will cache information and by that lower amount of traffic needed between the agent and the directory aswell as between the PAN and the agent.

But if you can have a close monitor on the PAN (and the server running the agent) you could of course try 60 seconds to see if traffic goes up (so you wont overload the mgmtplane or something).

topic Re: url filtering with groups moved user in General Topics

url filtering with groups moved user

Re: url filtering with groups moved user