12-22-2017 02:04 PM
Hi , ive got a 2 PA 3050's running well , however sometimes they seem to fail to detect the user thats currently logged in and then it follows the sert rules to allow then a "Student-level" web filtering rules whereby shopping , and social media etc are blocked , is there some sort of browser addon that i can install on Chrome to ensure the 3050 detect the corrent user and apply the correct level of filering ?
seems to affect mostly wireless users and mac/chromebook users ....
12-22-2017 02:22 PM
Hello,
I guess I would start by asking how are the users being populated into the PAN now? The default timeout/cache setting on the PAN's is low, I have ours set to 720 minutes and monitors exchange logong. This way outlook talks to exchange continuously and the PAN is kept up to date. If a user moves IP's its not long before the PAN picks up on it.
Here is a great collection of articles:
https://live.paloaltonetworks.com/t5/Management-Articles/User-ID-resource-list/ta-p/70379
Hope that helps!
Cheers!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
