09-29-2021 01:52 PM
Why some of the userids appear with a timeout of never for both idle and max timeout
09-29-2021 07:32 PM
Have you verified that the source pulling in this information is actually configured to timeout? You aren't required to let it timeout and be removed, and if you have multiple different sources or have something adding user-id via the API they could simply not be setting a timeout.
11-09-2021 11:13 PM
@BPry This firewalls host 2 virtual systems and one of them is configured as user-id hub. Only sources of User-ID are the agents on domain controllers and I have checked them and these IP's don't sow under monitoring in the agent and these systems have long been decommissioned. All agents are configured to time-out. There is no API as well adding users. The screenshot earlier shows they were added by UIA. Can they be manually removed/cleared from the firewall.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
