topic Re: Navigation Permits Expire - AD Groups in General Topics

Navigation Permits Expire - AD Groups

Alcs_altamirano — Fri, 28 Feb 2020 20:29:23 GMT

I recently implemented a policy that allows certain users who belong to a group in my Active Directory to go online. It seems to work well but after a while users report not being able to browse even if the LAN connection is maintained. The funny thing is that if you reboot the PC or simply block and unblock using the AD account the permissions are restored.

I would be grateful if I could get your help.

Re: Navigation Permits Expire - AD Groups

Retired Member — Fri, 28 Feb 2020 21:36:23 GMT

I believe what you are looking for is this: Configure Cache Timeouts for User Mapping Entries

It sounds like your users are timing out,and without them logging in again in one form or another, the User-ID mapping is not restored. Double check the "User Identification Timeout (min)" value.

Re: Navigation Permits Expire - AD Groups

Alcs_altamirano — Fri, 28 Feb 2020 22:33:13 GMT

Increase the timeout a bit, see how it behaves and play around with the AD policy to block the PC before the cache time runs out.

Thank you

Re: Navigation Permits Expire - AD Groups

kgopichand — Sun, 01 Mar 2020 04:12:36 GMT

@Alcs_altamirano

I would recommend to start troubleshooting by capturing packets on the firewall and based on what you find in the packet capture , the troubleshooting would have to evolve from there.

If you still need help , I would recommend to open a support ticket.

Kavi

Re: Navigation Permits Expire - AD Groups

Alcs_altamirano — Mon, 02 Mar 2020 14:33:35 GMT

Ok gracias por el consejo.