Local user Identification issue
cancel
Showing results for 
Search instead for 
Did you mean: 

Local user Identification issue

L1 Bithead

As per the below mention snap-shot, we observed user id get changed with AD user and we have allowed the internet access to local user id which is configured in Palo Alto. Due to issue user facing internet issue.

 

We have not configure this user in AD domain, then how user id gets change in  the Palo Alto automatically ?

 

While authenticating via AD traffic is going via cleanup rule.

 

What should be done, so traffic will authenticate locally?

 

 

Sometimes machine authenticated  locally sometime by  AD though machine is not in domainSometimes machine authenticated locally sometime by AD though machine is not in domain

1 ACCEPTED SOLUTION

Accepted Solutions

L7 Applicator

my first guess would be that you have probing enabled on the user-id agent.

 

if the firewall receives a connection from an IP in a user-id enabled zone for which there is no mapping, it will query the user-id agent

if the agent has no mapping and probing is enabled, it will poll the machine for the 'logged in' credentials and feed those to the firewall if the machine replies

 

this seems the most likely reason why you're seeing a username you don't have in your ID (its what the machine tells the probe)

Tom Piens
Like my answer? check out my book! https://bit.ly/MasteringPAN

View solution in original post

1 REPLY 1

L7 Applicator

my first guess would be that you have probing enabled on the user-id agent.

 

if the firewall receives a connection from an IP in a user-id enabled zone for which there is no mapping, it will query the user-id agent

if the agent has no mapping and probing is enabled, it will poll the machine for the 'logged in' credentials and feed those to the firewall if the machine replies

 

this seems the most likely reason why you're seeing a username you don't have in your ID (its what the machine tells the probe)

Tom Piens
Like my answer? check out my book! https://bit.ly/MasteringPAN

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!