Monitoring - source user not shown in log

[robert_smith]

Although the "agentID client" is installed on one of our domain controller boxes, I find that when using MONITOR log to look at the traffic, it doesn't show the "source user" of whom is currently logged in via Active Directory. Any idea why?

In addition, the monitor log will show the ip address and it will "resolve hostname" when checking the box.

Any help would be appreciated.

Rob

[jcostello]

We are seeing a similar issue on 3.1.2 client connecting to PANOS 4.0.11 (yes we do have an open case)

We've tried reinstalling the agent with out success

We've tried uninstalling the agent, doing a clean up and installing again.

No luck as yet, but we will update when we find a resolution.

[systemadmin_tu]

I have the same problem with PAN OS 4.1.6 and UI agent 4.1.6-5.

Help me..

[kmurphy6]

same problem here with OS 4.1.9 and agent 4.1.4-3...intermittently empty source user field in traffic logs for the same source IP