End-of-Life (EoL)

Known Issues

Describes the known issues in the Windows-based User-ID™ agent 8.0 release.
The following table describes known issues in the Windows-based User-ID™ agent 8.0 release.
For recent updates to known issues for a given PAN-OS® release, refer to live.paloaltonetworks.com/t5/Articles/Critical-Issues-Addressed-in-PAN-OS-Releases/ta-p/52882.
Issue ID
Description
WINAGENT-398
When the User-ID agent restarts, it loads the existing IP address-to-username mappings but with an incorrect username value if the username has a space. The ability to fetch IP address-to-username mappings from AD or other sources is not impacted even when usernames have a space.
WINAGENT-244
This issue is now resolved. See
User-ID Agent 8.0.8 Addressed Issues
.
The Windows-based User-ID agent does not detect users whose account name (sAMAccountName) contains a dollar ($) character that isn't at the end of the name.
WINAGENT-142
This issue is now resolved. See
User-ID Agent 8.0.2 Addressed Issues
.
Test Connection
(
MDM Integration
Setup
Test Connection
) for the MDM integration service returns a
Test Failed
message even when the integration service successfully connects to the AirWatch MDM service.
Workaround:
Refer to the top-level
MDM Integration
tab to view the correct connection status.
WINAGENT-141
This issue is now resolved. See
User-ID Agent 8.0.3 Addressed Issues
.
The MDM integration service of the Windows-based User-ID agent rejects connections from MDM event notification service if the IP Address of the MDM event notification service is not configured as a
Permitted IP
address (
MDM Integration
Setup
Permitted IP
).
WINAGENT-133
This issue is now resolved. See
User-ID Agent 8.0.1 Addressed Issues
.
The Windows-based User-ID agent has a memory leak while running the MDM Integration Service.
WINAGENT-122
This issue is now resolved. See
User-ID Agent 8.0.2 Addressed Issues
.
The Windows-based User-ID agent frequently resets its connection with a syslog sender, causing the sender to generate numerous connection failure logs and associated alerts.
WINAGENT-109
This issue is now resolved. See
User-ID Agent 8.0.1 Addressed Issues
.
The Windows-based User-ID agent attempts to contact the certificate store on the agent even though this step is not necessary when hashes match. As a result, authentication fails even for matching hash-es when the certificate store on the agent is inaccessible.
WINAGENT-90
This issue is now resolved. See
User-ID Agent 8.0.1 Addressed Issues
.
The Windows-based User-ID agent running the MDM integration service can fail during startup and require a restart. This issue is caused by a Windows module (webio.dll) that faults and appears in
Windows Event Viewer
Applications
.
WINAGENT-65
This issue is now resolved. See
User-ID Agent 8.0.2 Addressed Issues
.
When the PAN-OS XML API sends user mappings with no timeout value to a Windows-based User-ID agent, the agent sets the mappings timeout to never instead of applying the
User Identification Timeout
setting.

Recommended For You