traffic log did not display user information

[Felixcao]

The customer uses GP to dial in and adopts LDAP authentication method.
After the customer dialed in normally, they accessed internal resources, but the source user colums in the traffic log did not display user information, which was normal before. The customer did not make any other changes, and the user id in the area was also checked.
How to investigate and what suggestions do you have。

or ：debug software restart process user-id ？

[reaper]

typically there's 2 reasons this could happen:

- The zone that is used for the GP gateway tunnel interface does not have user-id enabled

- userid agent (or agentless) does not have an exclude for the GlobalProtect IP pool and is trying to refresh mapping from AD logs (which may or may not be there dependiong on what the user is doing). add an exclude for the IP pool should fix this issue

[Felixcao]

hi cyber elite:

thanks you reply

typically there's 2 reasons this could happen:

- The zone that is used for the GP gateway tunnel interface does not have user-id enabled

i confirm the zone that is used for the GP gateway tunnel interface have user-id enabled

- userid agent (or agentless) does not have an exclude for the GlobalProtect IP pool and is trying to refresh mapping from AD logs (which may or may not be there dependiong on what the user is doing). add an exclude for the IP pool should fix this issue

i don't understant it ,how to exclude for the ip pool fix this issue. ?

[reaper]

the exclude will help prevent conflicts

GlobalProtect automatically teaches the firewall all the correct user-ids. 

adding another user-id method for that subnet can only introduce complications