How to see uesr-ip mapping in panorama GUI?

[saswins]

I know there is this CLI command "show user ip-user-mapping-mp all" to view all user-ip mapping Just wondering if this info is shown anywhere in GUI

Thanks,

[PavelK]

Thank you for the post @saswins

If your Firewall is configured to send User-ID information to Panorama under: Device > Log Settings > User-ID > [Select Panorama check box], then you will be able to see Use-ID log in Panorama under: Monitor > Logs > User-ID.

The information you get from this log is almost identical what you can see directly from Firewall's CLI.

Kind Regards

Pavel

[saswins]

No Monitor > Logs > User-ID.I will the historic logs not the live user-ip mapping(meaning current active users)

[PavelK]

Thank you for reply @saswins

If you need current active user IP mapping in Panorama, your only option is to set up Panoram for User-ID redistribution. Below is the reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/user-id-redistributi...

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/redistribute-user-id-...

This will however not give you any option in GUI. You will still have to get that information from CLI by: show user ip-user-mapping-mp

Kind Regards

Pavel

[saswins]

ok got it

[Gustavo_Aristi]

In short, the answer to your question is no. Only via CLI you can view the user-IP mapping table.

You might be able to pull this off via the API.

To try, you can go to: https://yourFWIP/php/rest/browse.php/user-id

Let me know if you figure it out (if you are interested to go that route).

Thanks.