No user names in the PA appliance

goldandy — Wed, 21 Sep 2011 13:39:18 GMT

Still no user names in the PA appliance.

from PAN-Agent debug:

[skipped]

2011 09 21 16:55:16, AddEntryUnknownTableSafe 192.168.207.100

2011 09 21 16:55:16, User Enumeration, IP: 192.168.207.100, Username: MERVIN$, Domain: companyname

2011 09 21 16:55:16, User Enumeration, IP: 192.168.207.100, Username: __vmware_user__, Domain: MERVIN

2011 09 21 16:55:16, User: 'mervin\__vmware_user__' is not valid

2011 09 21 16:55:16, User Enumeration, IP: 192.168.207.100, Username: user1, Domain: companyname

2011 09 21 16:55:16, Valid user: companyname\user1

2011 09 21 16:55:16, Probe new entry: 192.168.207.100

2011 09 21 16:55:16, Netbios probe successful: 192.168.207.100 companyname\user1

2011 09 21 16:55:16, User for 192.168.207.100 set to companyname\user1

2011 09 21 16:55:16, AddEntryToUserEnumSafe 192.168.207.100

[skipped]

2011 09 21 17:16:12, Reading 11 entries from 192.168.207.14 done!

2011 09 21 17:16:12, New Connection(172.16.1.120:39327) Socket(672)

2011 09 21 17:16:12, Receiving PAN_AGENT_GET_ALL_INFO message from device (172.16.1.120)

2011 09 21 17:16:12, PAN_AGENT_GET_NEW_ALL_INFO:

2011 09 21 17:16:12, Sending 18 IP(s) to device (172.16.1.120)

2011 09 21 17:16:12, [1] 192.168.207.100 : companyname\user1 to device (172.16.1.120)

2011 09 21 17:16:12, [2] 192.168.207.201 : companyname\user2 to device (172.16.1.120)

[skipped]

So, for me - it's mean that everything is ok at the agent side.

At the same time:

admin@PA-5020> show user userid-agent statistics

uid-agent is running.

Server: andy-pc(vsys: vsys1) Address: 192.168.207.50:5555

Connection : Connected

Version : <Unknown>

number of connection tried : 13536

number of connection succeeded : 13463

number of connection failed : 73

number of user ip mapping messages received : 0

number of user ip mapping add entries received : 0

number of user ip mapping del entries received : 0

number of ip msgs rcvd but failed to process : 0

number of status messages received : 0

number of request of ip mapping messages sent : 0

number of request of all ip mapping messages sent : 1

number of request of status messages sent : 0

admin@PA-5020> show user ip-user-mapping ip 192.168.207.100

No matched record

What's may be wrong?

Is it correct that Version is <Unknown> in the show user userid-agent output?

I changed real user names in the output above to user1 and user2 for security purpose.

Regards,

Andrey

Re: No user names in the PA appliance

goldandy — Wed, 21 Sep 2011 14:05:14 GMT

I used userid agent for AD. It was my mistake.

with pan-agent it's ok now

Re: No user names in the PA appliance

jleung — Wed, 21 Sep 2011 17:03:37 GMT

Good to know that

topic Re: No user names in the PA appliance in General Topics

No user names in the PA appliance

Re: No user names in the PA appliance

Re: No user names in the PA appliance