show user ip-user-mapping IP Ident. By User Idle Timeout (s) Max. Timeout (s) --------------- --------- ------------------------- ---------------- ---------------- 10.16.0.119 AD paloalto\sgostami 975 975 10.20.1.69 AD paloalto\sfayhardt 2833 2833 10.16.0.231 UNKNOWN unknown 120 420 10.20.1.72 AD paloalto\cdodge 975 975 When the PanAgent is restarted, the connection between the FW and the agent is broken. When this connection is re-established, the FW will flush its cache and download all groups and users. Then it will query the agent for user mapping when it sees traffic from an IP address. Steve Krall
... View more