'enable-user-identification' turned on!

[Besfort]

Hi everyone,

I wanted to do user based filtering on PA-500, but after I've successfully connected PA with active directory, and applied a security policy on user based I get this warning:

Warning: Rulebase 'security'

Rule 'LAN-r2'; Zone 'LAN' does not have 'enable-user-identification' turned on.

Does anyone know how to enable user identification?

[DavePalo · Accepted solution]

Hi,

There should be a tick box in your zone settings?

Regards,
Dave

[Besfort]

Hi Dave,

Thanks for the reply, I was missing that tick box .

It is OK now, no warnings.

Regards,

B