PAN OS 7.1.14 AD issues after update

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

PAN OS 7.1.14 AD issues after update

L1 Bithead

After update PAN OS to release 7.1.14 we are having problems with user identification.
The user credentials are lost in PA and some access are denied because PA can not identify the user.

Have anyone experiencing something like that on 7.1.14?

5 REPLIES 5

L7 Applicator

if it's only some and not "all" try increasing "user identification timeout"

We've just talked about your suggestion here.
We are trying this change on settings as a workaround for now.

Thanks

OK but please note that the user will have to be entered in the AD security log for the ip address to be mapped.

a log off and back on to the domain will suffice

I opened a case on Palo Alto and the System Engineer discovered that it is a problem started on release 7.1.11 and will be fixed on release 7.1.15.
The workaround for it by now is the command below that it must be applied on every restart because it does not be salve on settings.

 

>debug user-id query-unknown-ip yes

Ok nice one, thanks for updating the post. 

  • 3167 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!