topic Re: Palo Alto Agentless User-Ip mapping Not Working in General Topics

Palo Alto Agentless User-Ip mapping Not Working

Animesh_Mishra — Wed, 26 Dec 2018 14:47:50 GMT

Hi Folks,

Need urgent help on an issue where " PAN Box Integrated with AD as an LDAP entity for USER-IP Mapping. So when User switches from LAN --> WiFi or WiFi --> LAN different IP Subnet, user-ip mapping don't change instantaneously" because of this user based policy doesn't enforce.

Please help.

Re: Palo Alto Agentless User-Ip mapping Not Working

Venuprasad — Wed, 26 Dec 2018 16:56:38 GMT

Is clearpass used for wireless?

Re: Palo Alto Agentless User-Ip mapping Not Working

Animesh_Mishra — Thu, 27 Dec 2018 02:06:45 GMT

No, Simple AD authentication is ON. But when the switching between WIFI --> LAN it still take time to create the mapping.

Re: Palo Alto Agentless User-Ip mapping Not Working

BPry — Fri, 28 Dec 2018 14:38:13 GMT

@Animesh_Mishra,

You'll never get an instantaneous mapping with the firewall, you still have to account for how often you have it reading the logs. What value do you have set for the Server Log Monitor Frequency and the Server Session Read Frequency under the User-ID Agent Setup options on the firewall?