Windows User ID Agent is unable to treat IP address when include list name ended a specific character

Windows User ID Agent is unable to treat IP address when include list name ended a specific character

1305
Created On 11/22/24 07:36 AM - Last Modified 10/28/25 20:01 PM


Symptom


  • Windows User ID Agent (UIA) is unable to treat IP address when the include list name ended a specific character.
  • UIA cannot match client IP with the Include / Exclude list even though the client IP is in the list range. You can see the following log when increase log level to debug on UIA:

UserIpMap: IP XXX.XXX.XXX.XXX is not in include list.



Environment


  • User ID Agent on Windows Server
  • Windows system locale language is not English


Cause


  • This is an Unicode issue.
  • Some particular Unicode characters such as "潟" are not handled properly on the UIA when system locale language is not English.


Resolution


This issue can be avoided by enabling worldwide Unicode support via the following steps. It is available on Windows Server 2022, but Windows Server 2016 does not supported this function.

 

  1. Move to Control Panel > Clock and Region > Change date, time, or number formats > Administrative tab > Click Changing system locale... > Enable check box of "Beta: Use Unicode UTF-8 for worldwide language support"
  2. To apply the above changes, restarting the Windows Server 
  3. After restarting the Windows Server, run User ID Agent and check whether the UIA is able to identify the Include / Exclude list setting

This this settings cannot be changed, Add another character as suffix such as "1", or changing list name to another one.



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000PQt0CAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language