This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About david_rivas1
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About david_rivas1
08-18-2015
19Posts
1Like
1Solution
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by david_rivas1
| Subject | Views | Posted |
|---|---|---|
| 3913 | 10-24-2012 08:38 AM | |
| 3913 | 10-23-2012 07:23 AM | |
| 4161 | 10-22-2012 01:05 AM | |
| 1226 | 08-21-2012 01:58 AM | |
| 1226 | 08-21-2012 01:19 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 08-09-2012 04:45 AM |
User Badges
Community Statistics
| Member Since | 01-12-2012 01:11 AM |
| Date Last Visited | 08-18-2015 09:07 AM |
| Posts | 19 |
| Total Likes Received | 1 |
10-24-2012
08:38 AM
The machines of these users are not in domain. That is the reason I used a script (obtain mapping from wireless controller) to send this mapping to the User-ID-Agent. Maybe these users use local admin account for some applications, but I have not configured admin ignoration.
... View more
10-23-2012
07:23 AM
I tied it without success. That is strange, why I get user ip-mapping throught CLI but it is only shown in some traffic logs. :smileyconfused:
... View more
10-22-2012
01:05 AM
Hello, I have developed a script that collects user-ip mapping from a wireless controller and send this info to User-ID Agent. All these looks fine because I can see the users in the User-ID Agent monitor table, but when I look traffic logs on Palo Alto I can see some logs do not have a user identification and other logs have it, for the same source IP. I attach a screenshot where you can see what I am trying to explain :smileysilly:. The user-ip mapping is correctly catched by PaloAlto. admin@PA-500> show user ip-user-mapping ip 172.21.8.195 IP address: 172.21.8.195 User: alumnes\zwillis Ident. By: AD Idle Timeout: 3581s Max. TTL: 3581s Groups that the user belongs to (used in policy) Does anyone knows what could be happening? Cheers,
... View more
Labels:
- Labels:
-
Troubleshooting
-
User-ID
08-21-2012
01:58 AM
Hello mikand, In my wireshark capture (done using port mirroring in the switch) any packet does not show bad checksum error. When I disable offloading the packet hit the received stage and pass through firewall and users complete the pre-authentication. This case has appeared when I tried to change a Fortigate firewall with a PaloAlto. With Fortigate firewall the problem did not exists, like PaloAlto without offloading enabled. This facts let us think it is a PaloAlto issue on his session hardware acceleration but only on this client, because we are not able to reproduce the scenario.
... View more
08-21-2012
01:19 AM
The packet is not dropped because when you use packet capture, you can choose different stages. If it was dropped it shoud appear in drop stage, and even if it is dropped or not it should appear on received stage and it does not appears in any stage. It only appears in received stage when I use no session offline. The PaloAlto has a permit any any any ... and both sides of traffic are in the same security zone. Also multicast is allowed (but it is not a multicast traffic). This case is only happening in one scenario. We tryed to reproduce it in a lab and we have not this problem.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks