cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who Me Too'd this topic

Issue with user detection on terminal server

L1 Bithead

Hello everyone,

 

We're having an issue with our terminal server agent software on multiple terminal servers running Windows Server 2019.

 

The problem lies in recognizing users who are logged on to these servers. The TS Agent sees the users on the Terminal Server Agent Monitor tab, but they do not appear in the traffic log in the Firewall Source User column.

Although in the past this scenario always worked for all applications that the logged-in user was using on the server (Microsoft 365, Adobe Acrobat) now users only appear in the traffic log when using the web browser on the server.

 

We have not changed our firewall configuration or the configuration of the terminal user agents on the terminal servers.

The only thing that has changed is the LACP connection to the trust zone between the firewall and a switch.

 

User detection via the User-ID agent on our domain controller is still working properly. All users on all clients are recognized and show up in the traffic log. The exception entries for the terminal server in the User-ID Agent are still there.

 

Anyone know where the problem could be?

Why did this always work before and now only via the web browser?

 

PA 450

PAN OS 10.2.4

Who Me Too'd this topic