How to find out if the user mapping is from userId agent or Agentless?
3448
Created On 02/25/20 04:25 AM - Last Modified 09/03/21 02:26 AM
Objective
How to find out if the user mapping is from userId agent or Agentless?
Environment
- Any PAN-OS
- UserID agent
- Agentless User-ID
Procedure
One of the ways to find out the user mapping is coming from an User-ID Agent or from Agentless User-ID is to run the command "show user ip-user-mapping all"
The output is shown below :
admin@PA_Vm_VPN> show user ip-user-mapping all
IP Vsys From User IdleTimeout(s) MaxTimeout(s)
------------------ -------------- ------- ---------------------------- -------------- -------------
192.168.0.3 vsys1 GP admin 10475 10476
192.168.10.10 vsys1 AD paloalto\administrator 2651 2651
Total: 2 users
Refer to the section "From":
- If the mapping is from Agentless the column will show as "AD"
- If the mapping is from User ID Agent, then the column will have "UIA".