User ID Anomalies

[DennyChanditya]

Hi,

I had a strange behaviour with some user on user ID. We have 2 site A and B and our firewall have the mapping from the same agent.

we found that user1 access site A and user2 access site B.

issue that we found that user1 is access site B using the user2 IP.

We check on each site the mapping is fine, but we dont find the user1 mapping to IP user2 on all firewall.

we check on User ID logs GUI and CLI it dont have any history about user1 was mapping to IP that user2 is using.

Any clue where i can find this data related to user id mapping, because i was use all the CLI command but didn't find the information that user1 was mapping to IP user2.

Thanks before.