topic Re: In the traffic logs the users disappear from the assigned policies in General Topics

In the traffic logs the users disappear from the assigned policies

Efrain_Olmos — Fri, 11 Sep 2020 00:46:52 GMT

Hi team

We are having problems with user groups in the policies.

When we see the logs in the users section it is blank after a while the users can be seen.

Take the tsf out of the high pole and checking the authentication logs, no connection problems were observed.

In the user-id logs I could see the following:

Error: pan_user_id_win_sess_query (pan_user_id_win.c: 1513): session query for (IP) failed: NTSTATUS: NT_STATUS_IO_TIMEOUT - NT_STATUS_IO_TIMEOUT
Error: pan_user_id_win_get_error_status (pan_user_id_win.c: 1055): WMIC message from server (IP): NTSTATUS: NT_STATUS_IO_TIMEOUT - NT_STATUS_IO_TIMEOUT

I investigated errors of this type but the only ones I found were missing user permissions.

Do you have any advice regarding this error that it shows me

Regards

Re: In the traffic logs the users disappear from the assigned policies

S.Cantwell — Fri, 11 Sep 2020 02:10:28 GMT

Hello

I must admit, I am a little confused by what I am reading/understanding.

Are we to understand that the user information originally WAS there, and then...just disappeared, only to show back up again?

Perhaps you can upload a few screen captures to better illustrate what you are attempting to describe?

Thank you.

Re: In the traffic logs the users disappear from the assigned policies

BPry — Fri, 11 Sep 2020 04:16:41 GMT

@Efrain_Olmos,

That error is primarily due to permissions, but it can also be caused by WMI not being enabled on the client, becoming corrupt, or the MGMT interface simply not being able to reach the client. Are you positive that the MGMT interface isn't getting dropped somewhere when it attempts to probe the client?