topic PA 3050 Logged in user web filtering in General Topics

PA 3050 Logged in user web filtering

VICO88 — Fri, 22 Dec 2017 22:04:58 GMT

Hi , ive got a 2 PA 3050's running well , however sometimes they seem to fail to detect the user thats currently logged in and then it follows the sert rules to allow then a "Student-level" web filtering rules whereby shopping , and social media etc are blocked , is there some sort of browser addon that i can install on Chrome to ensure the 3050 detect the corrent user and apply the correct level of filering ?

seems to affect mostly wireless users and mac/chromebook users ....

Re: PA 3050 Logged in user web filtering

OtakarKlier — Fri, 22 Dec 2017 22:22:32 GMT

Hello,

I guess I would start by asking how are the users being populated into the PAN now? The default timeout/cache setting on the PAN's is low, I have ours set to 720 minutes and monitors exchange logong. This way outlook talks to exchange continuously and the PAN is kept up to date. If a user moves IP's its not long before the PAN picks up on it.

Here is a great collection of articles:

https://live.paloaltonetworks.com/t5/Management-Articles/User-ID-resource-list/ta-p/70379

Hope that helps!

Cheers!