Hello, thanks for replay, I use user-id agent, the service running on w2k8 r2 DC with domain admin privilege (they point to two domain controller, first local where service are running and second in the same subnet), everything goes good to moment when I update PANOS to 5.0.8 from 5.0.7, (when the problem act I was back to 5.0.7). In User-ID users connecting from all subnets are good discovered with they IP/username, but on Monitor->Traffic device don't recognize user name from AD with IP source from other than PA subnets. I have "include list" configured for all subnets, agent are properly connect with servers and device. Regards, Adam
... View more