topic user to ip mapping with LDAP in General Topics

user to ip mapping with LDAP

ccboe — Thu, 04 Feb 2016 15:19:31 GMT

I have a pa 3020 running 6.0.8 doing LDAP lookups to multiple edir servers,

I have many users that PA shows as unknown but when I look on the server I see they are logged in x.x.x.x

Why does this work for some but not all?

I have done the following:

debug user-id refresh user-id agent all

debug software restart user-id

show user server-monitor state CHS1 (which shows it connected 2 seconds ago)

Thanks

Tom

Re: user to ip mapping with LDAP

pankaku — Thu, 04 Feb 2016 17:20:31 GMT

Unknown comes when you have enable the user identificate on the zone but firewall doesn't have the user-ip mapping for the ip address.

Have you configured agentless or agent configuration for user-ip mapping. Make sure you add all the domain controller. Check if you have configured any Included/Exclude list or not.

Hope this helps.

Re: user to ip mapping with LDAP

tsrivastav — Mon, 08 Feb 2016 14:29:35 GMT

Make sure the user name which you are using have proper permission to read the log events

Try using admin name and credentials to see if that make any change ( if you are not usning admin user )