Domain missing from username in GlobalProtect user logs

Domain missing from username in GlobalProtect user logs

41699
Created On 09/25/18 20:36 PM - Last Modified 05/31/23 21:58 PM


Resolution


Issue

When GlobalProtect users try to log in from their clients using their username, ip-user-mapping shows up as just the username instead of domain/username.

 

Resolution

Make sure that the authentication profile in use for GlobalProtect has Netbios domain added in the domain field.

 

If you are running a verision prior to PAN-OS 7.0, the domain configuration is located under the server profile used in the authentication profile. Go to Device > server profile > LDAP/RADIUS/Kerberos).

doc-60387-1.png

 

When running PAN-OS 7.0 and above, the domain configuration is located under the authentication profile.

Go to Device > Authentication Profile.

doc-60387-2.png

 

owner: sraghunandan
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CliyCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language