Security

Reply
New Contributor

CPPM XML API to PAN User-ID Issues

Our Palo Alto engineer is seeing some multiple user-ids mapped to a single IP. This does not happen for every user, only a select few, which has been making it hard to pinpoint the root cause. Gathering the logs from clearpass to see what clearpass is sending PAN, I see an error that stands out when I'd filtered by the username. The DOMAIN/username has been replaced by "xxxx". Is this error below coming from PAN or from Clearpass?

 

2018-01-30 14:20:00,296 INFO root ipcndevice Received response=<response status="error"><msg><line><uid-response>
<version>2.0</version>
<payload>
<logout>
<entry name="xxxx" ip="10.44.185.28" message="Delete mapping failed"/>
<entry name="xxxx" ip="10.48.185.106" message="Delete mapping failed"/>
<entry name="xxxx" ip="10.44.186.0" message="Delete mapping failed"/>
<entry name="xxxx" ip="10.35.34.2" message="Delete mapping failed"/>

CCNA, CWNA, ACMA
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: