PA2020 High CPU utilization "useridd" 100% management plane


Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

L0 Member

So just to be clear, this issue is specific to configurations using the external userID agent? I.e., the service that I'm running on my DCs?  I can't really switch to agent-less, which I assume means the settings in the Device --> User Identification --> User Mapping tab, as I need to parse Exchange logs. But if someone could clarify, that would be helpful for my own edification.

Not applicable

Came here for the same issue.  Constant 100% utilization on the management CPU.  Problem started when I moved from 5.0.1 to 5.0.2.

We're using the UserID agent and need the API functionality so we can't switch to agent-less.

Also, GlobalProtect clients seem to be disconnecting and reconnecting a lot since moving to 5.0.2, not sure if that's related to the management CPU being tied up.

L3 Networker

Hi all.

4.1.11-h1 is out. If you experience the high CPU load on useridd, please open a support case, and send the serial number, and you will be given access to the hotfix ASAP. For the same problem with 5.0.2, 5.0.3 will be released next week with the fix.


Not applicable

I just installed 5.0.3 (which addresses this issue) earlier today, looks like the fix is good.

L2 Linker

I agree so far (pretty early still to for me to call 5.0.3 all good, but...) it has useridd back to what I would call "normal" in terms of cpu utilization - I've put 5.0.3 on both 2000 and 4000 platforms with similar (good) results - let's just hope 5.0.3 doesn't introduce some new nasties!!!

L1 Bithead

Can confirm this as well. Management CPU back down to where it should be after applying 5.0.3.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!