cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who Me Too'd this topic

Domain Prefix Inconsistent in IP User Mapping

L0 Member

I have a problem with IP User Mapping. I has configured IP User Mapping using this article:

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Agentless-User-ID/ta-p/...

 

But when I list users, I get inconsistent user domain prefix:

 

show user ip-user-mapping all

IP              Vsys   From    User                             IdleTimeout(s) MaxTimeout(s)
--------------- ------ ------- -------------------------------- -------------- -------------
xxx.xxx.xxx.xxx  vsys1  AD      domain\3279                         2532           2532
xxx.xxx.xxx.xxx  vsys1  AD      domain\2558157                      1268           1268
xxx.xxx.xxx.xxx  vsys1  AD      domain\188517                       1390           1390
xxx.xxx.xxx.xxx  vsys1  AD      domain.root.local\2803275           2021           2021
xxx.xxx.xxx.xxx  vsys1  AD      domain.root.local\527257            824            824
xxx.xxx.xxx.xxx  vsys1  AD      domain\60494                        1647           1647

What is wrong?

 

Some information:

 

PA 3050

PANOS 7.1.7

 

 

>show user server-monitor statistics
Directory Servers:
Name                           TYPE     Host            Vsys    Status
-----------------------------------------------------------------------------
host01.domain.root.local       AD       host01.domain.root.local vsys1 Connected
>show user server-monitor state all

        UDP Syslog Listener Service is disabled
        SSL Syslog Listener Service is disabled

Server: host01.domain.root.local(vsys: vsys1)
        Host: host01.domain.root.local
        num of log query made                   : 17743
        num of log query failed                 : 0
        num of log read                         : 1332804
        last record timestamp                   : 1494428436
        last record time                        : 20170510150036.541714-000

User ID Agent Setup 01.PNGUser ID Agent Setup 02.PNGMonitored Server.PNG

Who Me Too'd this topic