Domain Check in HIP Profile

Issue

If a user authenticates successfully as the logs say, why is the domain not shown in the command: show global-protect-gateway current user?

Resoltuion

The DNS domain name might not work since the Palo Alto Networks firewall is looking for the domain name associated with the AD machine account name, which contains the NT domain name. For example, the DNS domain is paloaltonetworks.local, but the NT domian that needs checked for in the HIP object is, PALOALTONETWORK.

owner: panagent