06-08-2022 09:22 AM
Hi,
There seems to be an issue with our internal Palo firewalls and their Data redistribution, I'm not sure how long it's been an issue.
What it should do is redistribute the user authentication events to every firewall so it can use that us the user id in the firewall policy, but this isn't happening. User ID isn't showing across firewalls, like it isn't traversing the network.
Can anyone give me an idea what I need to look at, and why it could be an issue?
06-08-2022 10:11 AM
Hello,
I would say check your config to make sure its setup. Also make sure there are no security policies blocking the traffic.
Regards,
10-31-2024 01:39 AM
check the following things:
> from where user-id are getting learned. ie - on which FW Ip to user mapping is happening.
> check if the you had enabled the ip to user on the side where you want the redistribution to happen.
Also as mentioned by : OtakarKlie, please check the documents mentioned by him
If you can explain the topology, i think we can help you
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
