In the traffic logs the users disappear from the assigned policies

[Efrain_Olmos]

Hi team

We are having problems with user groups in the policies.

When we see the logs in the users section it is blank after a while the users can be seen.

Take the tsf out of the high pole and checking the authentication logs, no connection problems were observed.

In the user-id logs I could see the following:

Error: pan_user_id_win_sess_query (pan_user_id_win.c: 1513): session query for (IP) failed: NTSTATUS: NT_STATUS_IO_TIMEOUT - NT_STATUS_IO_TIMEOUT
Error: pan_user_id_win_get_error_status (pan_user_id_win.c: 1055): WMIC message from server (IP): NTSTATUS: NT_STATUS_IO_TIMEOUT - NT_STATUS_IO_TIMEOUT

I investigated errors of this type but the only ones I found were missing user permissions.

Do you have any advice regarding this error that it shows me

Regards

[SCantwell_IM]

Hello

I must admit, I am a little confused by what I am reading/understanding.

Are we to understand that the user information originally WAS there, and then...just disappeared, only to show back up again?

Perhaps you can upload a few screen captures   to better illustrate what you are attempting to describe?

Thank you.

[BPry]

@Efrain_Olmos,

That error is primarily due to permissions, but it can also be caused by WMI not being enabled on the client, becoming corrupt, or the MGMT interface simply not being able to reach the client. Are you positive that the MGMT interface isn't getting dropped somewhere when it attempts to probe the client?