How to see uesr-ip mapping in panorama GUI?

cancel
Showing results for 
Search instead for 
Did you mean: 

How to see uesr-ip mapping in panorama GUI?

L1 Bithead

I know there is this CLI command "show user ip-user-mapping-mp all" to view all user-ip mapping Just wondering if this info is shown anywhere in GUI

 

Thanks,

5 REPLIES 5

L6 Presenter

Thank you for the post @saswins

 

If your Firewall is configured to send User-ID information to Panorama under: Device > Log Settings > User-ID > [Select Panorama check box], then you will be able to see Use-ID log in Panorama under: Monitor > Logs > User-ID.

 

The information you get from this log is almost identical what you can see directly from Firewall's CLI.

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.

No Monitor > Logs > User-ID.I will the historic logs not the live user-ip mapping(meaning current active users)

L6 Presenter

Thank you for reply @saswins

 

If you need current active user IP mapping in Panorama, your only option is to set up Panoram for User-ID redistribution. Below is the reference:

 

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/user-id-redistributi...

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/redistribute-user-id-...

 

This will however not give you any option in GUI. You will still have to get that information from CLI by: show user ip-user-mapping-mp

 

Kind Regards

Pavel

Help the community: Like helpful comments and mark solutions.

ok got it

L2 Linker

In short, the answer to your question is no. Only via CLI you can view the user-IP mapping table.

 

You might be able to pull this off via the API.

 

To try, you can go to: https://yourFWIP/php/rest/browse.php/user-id

 

Let me know if you figure it out (if you are interested to go that route).

 

Thanks.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!