07-12-2023 06:37 AM
Hello everyone,
We're having an issue with our terminal server agent software on multiple terminal servers running Windows Server 2019.
The problem lies in recognizing users who are logged on to these servers. The TS Agent sees the users on the Terminal Server Agent Monitor tab, but they do not appear in the traffic log in the Firewall Source User column.
Although in the past this scenario always worked for all applications that the logged-in user was using on the server (Microsoft 365, Adobe Acrobat) now users only appear in the traffic log when using the web browser on the server.
We have not changed our firewall configuration or the configuration of the terminal user agents on the terminal servers.
The only thing that has changed is the LACP connection to the trust zone between the firewall and a switch.
User detection via the User-ID agent on our domain controller is still working properly. All users on all clients are recognized and show up in the traffic log. The exception entries for the terminal server in the User-ID Agent are still there.
Anyone know where the problem could be?
Why did this always work before and now only via the web browser?
PA 450
PAN OS 10.2.4
