User IP mapping shows "unknown" for a User Connected via GlobalProtect.
780
Created On 05/29/25 05:10 AM - Last Modified 01/30/26 05:02 AM
Symptom
- User IP mapping is "unknown" for a user that is connected to the GlobalProtect Gateway.
- The command "show user ip-user mapping ip <ip address>" displays user as "unknown".
- "show session id <id>" matching the IP address of source/destination also display the user as "unknown".
- "show log userid" displays the username displayed correctly.
Environment
- Palo Alto Firewalls
- Prisma Access Firewalls
- Supported PAN-OS
Cause
Software Issue.
Resolution
- The issue is resolved under PAN-225963.
- The issue is resolved in the PAN-OS versions below.
- Upgrade to the above versions or later will resolve the issue.
Additional Information
n/a