I've got a clearpass cluster with multiple servers, subscribers and publisher nodes. I am attempting to do User-ID integration with the Palo Alto XML API.
On my Palo Alto firewall for login and logout events, I am seeing the Clearpass servers send 5 - 7 login request for a user. The requests all happen within seconds. Is there a reason that the cluster is sending that many? It seems that one would be enough. The same thing happens for logout events.