topic IP to User mapping Format in General Topics

IP to User mapping Format

gpsriram — Thu, 17 Jan 2019 10:07:48 GMT

Hi !

We configured Windows User Agent for the IP-to-User Mapping to apply the AD group based policy. User Agent is fine and IP-to-User lookup forwadred to firewall .

But the problem in the user format. Some user's mapped in the format of netbios\username ( AD\user1) and some of the user's mapped in the format of dnsdomainname\username ( AD.example.com\user1)..

How we can troubleshoot on this??

Thanks in Advance..

Re: IP to User mapping Format

emr_1 — Fri, 18 Jan 2019 08:23:51 GMT

Hi,

Which version of UIA are you using?

I hit same issue and it was a bug.

===

WINAGENT-432

Fixed an issue where the User-ID agent failed to normalize usernames correctly before sending to firewalls when the usernames were in User Principle Name (UPN) format, which prevented PAN-OS 8.0 and earlier firewalls from enforcing policy as expected for those usernames.

===

This is fixed in UIA v8.1.4, so please try 8.1.4 or later (the latest version is 8.1.6)