XML User ID

fkizhuvara — Mon, 08 Apr 2019 05:35:32 GMT

One of our engineer setup XML to pull the user id and ipaddr mapping, which works with no problem. The problem is he left the organisation and we are not able to determine the source from where the input is coming into the firewall. The log on the PAN does not tell you exact source ipaddr.

irtual System

vsys1

Timeout

2700

Data Source

xml-api

Source Name

XMLAPI

Source Type

Factor Type

Factor Completion Timestamp

2019/04/07 22:19:23

Factor Number

Generate Time

2019/04/07 22:19:22

Begin Port

End Port

Re: XML User ID

BPry — Mon, 08 Apr 2019 12:38:05 GMT

@fkizhuvara,

Should be easy enough to look at traffic logs going to the management interface of the firewall to determine the oddball machine. Adversly you should have permitted-ips configured on any management interface, which would allow you to look only at the machines that are actually allowed access to the device.

topic XML User ID in General Topics

XML User ID

Re: XML User ID