topic Re: UID Agent Not Recognizing Docked Laptops in General Topics

UID Agent Not Recognizing Docked Laptops

polgarm — Tue, 03 Apr 2012 14:38:37 GMT

Last week we depolyed a PA500 for the first time and are seeing an issue with certain computers. The issue is affecting some users who have laptops and are using them on a docking station. When they are docked the computer essentially has two NICs connected (wired and wireless). The issue arrises when the Agent server only recognizes one of the NICs and registers it to the user's login name. As a result, when the user attempts to browse the web, the captive portal is displayed.

Has anyone else seen this issue? how is it resolved? Instructing 60+ laptop users to disable/enable their wireless every time they dock/undock isn't going to cut it in our environment.

Thanks.

Re: UID Agent Not Recognizing Docked Laptops

sjamaluddin — Thu, 05 Apr 2012 17:48:36 GMT

The User ID agent will monitor users as they authenticate against AD and if the particular IP address is in the User ID's monitor range. If the users do not authenticate agains AD when on the wireless network, then the Captive Portal authentication request is expected.

The way around it could be

. Ensure that UserID monitors the wireless network too

. Enable some kind of probing (but the PC must respond to probing for this to work) so the UserID "knows" the user at both the wired and wireless IP address

Re: UID Agent Not Recognizing Docked Laptops

acamacho — Thu, 05 Apr 2012 17:52:11 GMT

When it comes to having dual ethernet PAN-Agent/User ID should keep a record of both IP addresses for the same user.

If you see both user name on the same IP then that is a problem.

Also if you have multiple user agents running please check to see if you are seeing both or just 1 IP address on the agents.

Anyway I think you might be running into some issue that I have not seen, so if you can please do call into support so we can assist and look over your configuration to determine why you are seeing this.

Thank you