topic PAN Agent not seeing changes in AD in General Topics

PAN Agent not seeing changes in AD

djbisbey — Tue, 03 Aug 2010 08:31:40 GMT

Hi,

we have just become new users for the Palo Alto.

I have created some additional AD OU's to help managed our URL filterting, however the PAN agent is not seeing the changes.

We have tried the following:

Reboot of both domain controllers

restarting of the pan agent service.

Both of which have failed.

Any help would be great.

thanks

Darren

johnnywong — Tue, 03 Aug 2010 10:46:39 GMT

Hi Darren,

Did you applied filter on the PAN agent? Is it possible to see users belongs to that OU in the PA device?

BTW, you may try below command to check the PAN agent status in PA device which running 3.1.x.

>show user pan-agent user-IDs or

>show user pan-agent statistics

Hope it help!

Johnny

mharding — Mon, 09 Aug 2010 19:28:04 GMT

Just wait. I've seen it take up to six hours before a user or group appears in the PAN-Agent database.