PanOS 4.1: User-ID transfers mappings to device, but does not display in WEB UI

[F_Rybkin]

Hi all!

The other day I ran into this problem:

I have upgraded my pa-2050 to 4.1, installed User-ID on DC server, made all settings on User-ID Agent.

I have add User-ID agent's IP address in Device/User identification and it is connected now.

I can see users-to-ip mapping using CLI commands, but i cant see and select users and groups for example in Policies "user' section ->add user drop down menu.. I alsow cant see Users in Monitor/Traffic.

I have tried to reboot the device but it still doesn work

Any ideas?

[F_Rybkin]

I forgot to write that i have checked the Use User-ID box in Zone settings..

[kbrazil]

In 4.1 the user to group mapping has been moved to the firewall.  Did you configure the "Group Mapping Settings" tab under the User-ID section?

Cheers,

Kelly

[F_Rybkin]

No, i did not..

Thanks for advise, i'll try to configure.

[gafrol]

I have the same setup and the same problem. I cannot select single AD usernames as a source in the policy, selecting AD groups is working. Am I'm missing something here ?  rgds Roland

[paulmeys]

Are you using device-groups?

If so, please check that you have selected a master device / group.

Kind regards,

Paul

[gafrol]

I am not using Device Groups.