Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
09-21-2011 06:39 AM
Still no user names in the PA appliance.
from PAN-Agent debug:
[skipped]
2011 09 21 16:55:16, AddEntryUnknownTableSafe 192.168.207.100
2011 09 21 16:55:16, User Enumeration, IP: 192.168.207.100, Username: MERVIN$, Domain: companyname
2011 09 21 16:55:16, User Enumeration, IP: 192.168.207.100, Username: __vmware_user__, Domain: MERVIN
2011 09 21 16:55:16, User: 'mervin\__vmware_user__' is not valid
2011 09 21 16:55:16, User Enumeration, IP: 192.168.207.100, Username: user1, Domain: companyname
2011 09 21 16:55:16, Valid user: companyname\user1
2011 09 21 16:55:16, Probe new entry: 192.168.207.100
2011 09 21 16:55:16, Netbios probe successful: 192.168.207.100 companyname\user1
2011 09 21 16:55:16, User for 192.168.207.100 set to companyname\user1
2011 09 21 16:55:16, AddEntryToUserEnumSafe 192.168.207.100
[skipped]
2011 09 21 17:16:12, Reading 11 entries from 192.168.207.14 done!
2011 09 21 17:16:12, New Connection(172.16.1.120:39327) Socket(672)
2011 09 21 17:16:12, Receiving PAN_AGENT_GET_ALL_INFO message from device (172.16.1.120)
2011 09 21 17:16:12, PAN_AGENT_GET_NEW_ALL_INFO:
2011 09 21 17:16:12, Sending 18 IP(s) to device (172.16.1.120)
2011 09 21 17:16:12, [1] 192.168.207.100 : companyname\user1 to device (172.16.1.120)
2011 09 21 17:16:12, [2] 192.168.207.201 : companyname\user2 to device (172.16.1.120)
[skipped]
So, for me - it's mean that everything is ok at the agent side.
At the same time:
admin@PA-5020> show user userid-agent statistics
uid-agent is running.
Server: andy-pc(vsys: vsys1) Address: 192.168.207.50:5555
Connection : Connected
Version : <Unknown>
number of connection tried : 13536
number of connection succeeded : 13463
number of connection failed : 73
number of user ip mapping messages received : 0
number of user ip mapping add entries received : 0
number of user ip mapping del entries received : 0
number of ip msgs rcvd but failed to process : 0
number of status messages received : 0
number of request of ip mapping messages sent : 0
number of request of all ip mapping messages sent : 1
number of request of status messages sent : 0
admin@PA-5020> show user ip-user-mapping ip 192.168.207.100
No matched record
What's may be wrong?
Is it correct that Version is <Unknown> in the show user userid-agent output?
I changed real user names in the output above to user1 and user2 for security purpose.
Regards,
Andrey
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
