topic Re: Setting up user-id in General Topics

Setting up user-id

BenwayNet — Thu, 18 Sep 2014 15:11:32 GMT

I have the agent on a member server talking to my domain controllers. I can see in the agent logs and monitoring its collecting IP/username

I can see the PA box as a connected device.

I have the server the agent is running on setup under user identification > user-id agents on the PA box and that has a green bubble for connected.

but when I look at the url logs nothing is showing up for source user.

I'm not trying to write any rules for groups. I"m just starting so I want to make sure the user information is reporting in the url filter.

thanks,jb

HULK — Thu, 18 Sep 2014 15:26:41 GMT

Hello benwaynet,

Have you checked user to IP mapping on the PAN firewall.

> show user ip-user-mapping all

> show user user-id-agent statistics

Thanks

BenwayNet — Thu, 18 Sep 2014 15:31:26 GMT

I only have access to the Web UI. Can I view the IP mapping through the Web UI?

BenwayNet — Thu, 18 Sep 2014 15:39:48 GMT

I got access.

show user ip-user-mapping all gives me a list of IP and user names

show user user-id-agent statistics gives me the servername I setup the agent on.

HULK — Thu, 18 Sep 2014 15:42:42 GMT

Hello Jb,

Does traffic log shows any user information on it.?

Thanks

BenwayNet — Thu, 18 Sep 2014 15:44:58 GMT

There is nothing for 'source user' in the traffic logs.

sjamaluddin — Thu, 18 Sep 2014 15:47:15 GMT

Can you please ensure that "UseriD is enabled" under the zone you are trying to monitor these users off of?

Check under Network>>Zones >> check the box for UserID

BenwayNet — Thu, 18 Sep 2014 15:51:25 GMT

That was it! the setting in the zone.

I never saw that setting in any of the guides I had found.

Thank you!