cancel
Showing results for 
Search instead for 
Did you mean: 

Who rated this post

Cyber Elite
Cyber Elite

Are the internal servers the ones you have configured for agentless User-ID?  These are located under Device > User Identification > User Mapping > Server Monitoring.  Agentless User-ID uses WMI Authentication.  https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000ClGG

 

I see the same traffic on my network, but it is only to the servers I have configured.

Help the community: Like helpful comments and mark solutions.
Who rated this post