Hello, We have been experiencing User-ID server monitor connection timeouts to one of our Windows 2008 R2 Domain controllers. The VM domain controller seems fine with all other services (Non Palo). User-ID Agent 8.0.507 installed on the domain controller. Receive roughly 20 alert emails at all times of the day, there is no pattern in frequency. Alert Email: "SYSTEM ALERT : high : User-ID server monitor adjutant.abcd.local(vsys1) Connection timeout domain: 1 receive_time: 2018/02/13 17:19:38 serial: seqno: 7472192 actionflags: 0x0 type: SYSTEM subtype: userid config_ver: 0 time_generated: 2018/02/13 17:19:38 dg_hier_level_1: 0 dg_hier_level_2: 0 dg_hier_level_3: 0 dg_hier_level_4: 0 vsys_name: device_name: VM200 vsys_id: 0 vsys: eventid: connect-server-monitor-failure object: fmt: 0 id: 0 module: general severity: high opaque: User-ID server monitor adjutant.abcd.local(vsys1) Connection timeout" Occasionally users are prompted the captive portal in the web browser for authentication (usually automatic if a domain client), if the domain user enters their credentials web browsing resumes. Primary DNS server for the domain is the same server and has no DNS issues, network connectivity has found no problems. All other DC’s have no time out issues. Regular monthly windows patches are applied to all DC’s. Tried multiple user ID agent versions and all have the same issue. The same domain user account is used on all Palo firewalls for user mapping. ny idea how to fix this? Thanks in advance.
... View more