About acamacho

I am going to assume that the licenses are updated. If not need to check that. Since you are using service routes the passive interface will not have any access out to the internet so even if you downloaded the seed file from our support site. The PAN needs to be able to go out and get updates as Brightcloud will always have latest update. If you can't use the mgmt port to get out to the internet then you will have always do a manual update. if you have further questions please let us know or call into support. thank you ... View more

The upgrade path to 5.08 from 4.0.12 If you have HA recommend that you upgrade the Passive first until you know that traffic passes and all features link VPN, IPsec in any works Export out your running-config.xml from the PAN so you have a backup in the event you need it. Download and do not install 4.1.0 Download and install 4.1.15 After the reboot and auto comm completes. From the Active device suspend so the passive takes over as the new active. Once you are sure all works then repeat on the active device. If you want to see what bugs and changes have gone into release 5.0.8 from the software link in the DEVICE TAB once you are running with 4.1.15 you should see the release notes. You can also log in to your support portal and under software you can download the release note from there. Hope this helps and if you like you're always welcome to call in for further assistance. Thank you ... View more

There are so many different items to look at if you want to know how to troubleshoot UserID issues. You can look in knowledge point for the specific issue you are facing. What is the actual issue you are facing.. Is it a user to ip mapping issue? Is it a LDAP group mapping issue? Your best bet might be to call into support or open a case so we can verify the issue that you are seeing. Thanks ... View more

Hello I just tested and it works from both Safiri and youtube app.. There could be may reasons, so if you have the time to call into support we can take a close look at counters. An any any policy moved to the top with source IP address of the ipad and no filtering should work. If not then we can assist over a web meeting. Thank you ... View more

This does sound like the version of User ID Agent is not supported. What version of PANos are you using? Can a 4.0.x device use the 4.1 user id agent? No. Can a 4.1 device use the 3.1.2 pan-agent? Yes. Hope this helps. ... View more

Hello It sounds like you have your configuration configured correctly, but without seeing only think I can recommend is the following. 1. Select the Network tab 2. Select the Zones link and make sure the zone that your clients connects has the Enable User Identification box checked. 3. Check the traffic log and see if your user name is being seen under the source user column. If you have time during your local business day maybe you can call into support so we can assist. Thank you ... View more

Hi Let me see if I can find the information but in the meantime here is a link that you can also review. https://live.paloaltonetworks.com/docs/DOC-1877 https://live.paloaltonetworks.com/docs/DOC-1936 ... View more

Please add another snap shot of the traffic log that shows the either screen.. need to see if you are hitting the same rules for the users that are not be identified. Also click on the detail icon.. Far left the one with the box and magnifying glass and add that snap shot too. If you have time as well maybe calling into support will help so we can look at it closer. thank you Al ... View more

You can also try and open up a security policy and specify the source IP of the test host pc. Create an any any policy without any scan profiles as well. Move the policy to the top. If this works then review the existing policy to see if the application or scan profiles might be preventing the traffic from being identified. If this still does not work you might want to call into support or your local reseller for assistance. Thank you ... View more