10-22-2012 06:01 PM
I'm seeing a lot of strange user mappings in version 4.1.6-5. I have a single user who is showing up on around 70 IP addresses. There are other users showing up on many IP addresses.
When I search the User-ID Agent logs, it says it is getting this mapping by a NetBIOS query. If I do an NBTStat -A ipaddress I do not see any NetBIOS response (The machines in question do not have NetBIOS allowed throughm they are in a certain subnet.)
What type of NetBIOS query is the user agent making against the IP address? I'd like to figure out why it still thinks the users are on the IP.
Also, any word on when Palo Alto will be releasing a user agent EXE for Windows 7? I'd really like to get the user agent mapping working solidly. My previous filters from M86, Surfcontrol, and eSafe all had Windows 7 client user agents. The mapping was much more accurate with them.
Thanks!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
