userid mapping never timeout

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

userid mapping never timeout

L4 Transporter

Why some of the userids appear with a timeout of never for both idle and max timeout

 

image.png

2 REPLIES 2

Cyber Elite
Cyber Elite

@raji_toor,

Have you verified that the source pulling in this information is actually configured to timeout? You aren't required to let it timeout and be removed, and if you have multiple different sources or have something adding user-id via the API they could simply not be setting a timeout. 

@BPry This firewalls host 2 virtual systems and one of them is configured as user-id hub. Only sources of User-ID are the agents on domain controllers and I have checked them and these IP's don't sow under monitoring in the agent and these systems have long been decommissioned. All agents are configured to time-out. There is no API as well adding users. The screenshot earlier shows they were added by UIA. Can they be manually removed/cleared from the firewall.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!