Palo Alto Agentless User-Ip mapping Not Working

[Animesh_Mishra]

Hi Folks, 

Need urgent help on an issue where " PAN Box Integrated with AD as an LDAP entity for USER-IP Mapping. So when User switches from LAN --> WiFi or WiFi --> LAN different IP Subnet, user-ip mapping don't change instantaneously" because of this user based policy doesn't enforce. 

Please help.  

[Venuprasad]

Is clearpass used for wireless?

[Animesh_Mishra]

No, Simple AD authentication is ON. But when the switching between WIFI --> LAN it still take time to create the mapping. 

[BPry]

@Animesh_Mishra,

You'll never get an instantaneous mapping with the firewall, you still have to account for how often you have it reading the logs. What value do you have set for the Server Log Monitor Frequency and the Server Session Read Frequency under the User-ID Agent Setup options on the firewall?