topic Re: User-ID users not timing out in General Topics

User-ID users not timing out

msnazel — Tue, 04 Oct 2011 15:39:36 GMT

I only have a few users currently as this is a new deployment however the very few users I have do not seem to time out. I'm using the latest PAN agent on Win2008 R2.

I have users still mapped who haven't been in the office for over 2 weeks. I have myself across about 6 IP's too. I also have mappings to users who are not here.

My config is all default, I have netbios and wmi probing disabled.

Can anyone advise? I've cleared the mapping cache, restarted the PAN agent and all the mapped users return. This is rather annoying!

Thanks

M...

Re: User-ID users not timing out

bpappas — Tue, 04 Oct 2011 19:32:17 GMT

When you disable the Netbios/WMI probing the Pan Agent will ignore the timer value unless you hand-edit the configuration file and set <enable-full-expire> to 1.

after making this change and saving it to the configuration file, stop the Pan Agent service, delete the user-ip cache file and then restart the Pan Agent service.

This should clear up the problem.

-Benjamin

Re: User-ID users not timing out

msnazel — Wed, 05 Oct 2011 17:31:15 GMT

I did this and almost nobody appears named anymore. Rather odd to be honest. I run a dual stacked IPv4/IPv6 network so I can only assume that this is partly why.

As an example, if I disable IPv6 on a machine and then logon purely using v4, I find I'm not being picked up but the machine I'm using is in the pool of address ranges to be scanned.

It would really help if PA can hurry up with the IPv6 capable client for getting user-id's!