topic Re: FW lose UIA mapping in General Topics

FW lose UIA mapping

BigPalo — Wed, 16 Jun 2021 09:40:51 GMT

Hi,

We are having a issue in the FW. Suddenly the FW loses the UIA mappings. We upgrade the FW to 8.1.19 in order to avoid any previous bug but the issue repeated. Its quite random. Upgrade was done last 8th June and it happenened today,

In order to solve we need to restart userid process.

why this is happening?

why

Re: FW lose UIA mapping

aleksandar.astardzhiev — Wed, 16 Jun 2021 10:40:20 GMT

Hi @BigPalo ,

Have you checked this article - LIVEcommunity - Microsoft's June 2021 patches may break the User-ID Agent's connection to Domain Controller(s) - LIVEcommunity - 413331 (paloaltonetworks.com) i

Re: FW lose UIA mapping

OtakarKlier — Wed, 16 Jun 2021 18:51:54 GMT

Hello,

Here is my writeup on it 🙂

https://live.paloaltonetworks.com/t5/general-topics/user-id-not-populating-after-microsoft-patching-warning/td-p/413278

Regards,

Re: FW lose UIA mapping

BigPalo — Mon, 21 Jun 2021 06:17:29 GMT

We havent installed that patch, and the event is not appearing in UIA logs.

what another issue could have¿?

Re: FW lose UIA mapping

BigPalo — Mon, 05 Jul 2021 10:46:56 GMT

We are trying to find any event in useridd logs but we can not see anything. Is there any way to increase the size for this log?