We have stale userID/IPaddr entries in PA from our AD servers. We implemented regex and syslog feed for the campus ASA so solve the issue, but need it also for Anyconnect user traffic. Found what appears to be the regex for anyconnect syslog feed. https://live.paloaltonetworks.com/t5/Automation-API-Discussions/Cisco-Anyconnect-Regex-for-User-ID/m-p/49255 Is there something more recent or an alternative?
... View more