User ID firewall having an empty status column for the server monitoring

FarzanaMustafa — Thu, 08 Aug 2019 00:32:24 GMT

Hello,

We are using PAN-OS 8.0.6-h3. Our User ID firewall is showing an empty status column for the server monitoring.

> show user group list

Server error : op command for client useridd timed out as client is not available

^^This was encountered while adding an AD group in the Group Mapping -> Group Include List

> less mp-log useridd.log

ignore userip msg from client 10.70.2.153/47785 since last one is still processing

2019-08-07 08:13:24.116 +1000 Warning: pan_user_id_client_get_userip(pan_user_id_client.c:621): ignore userip msg from client x.x.x.x/43932 since last one is still processing

Kindly advise how to resolve this issue.

Re: User ID firewall having an empty status column for the server monitoring

BPry — Thu, 08 Aug 2019 02:42:02 GMT

@FarzanaMustafa,

First and foremost, I highly recommend you upgrade your PAN-OS version. The version you are currently running is vulnerable to a laundry list of security issues that have been addressed since it's release.

That being said; I would initially try simply restarting the user-id process by running the following command.

debug software restart process user-id

topic Re: User ID firewall having an empty status column for the server monitoring in General Topics

User ID firewall having an empty status column for the server monitoring

Re: User ID firewall having an empty status column for the server monitoring