Known Issues

Describes the known issues in the Windows-based User-ID™ agent 8.0 release.
The following table describes known issues in the Windows-based User-ID™ agent 8.0 release.
For recent updates to known issues for a given PAN-OS® release, refer to live.paloaltonetworks.com/t5/Articles/Critical-Issues-Addressed-in-PAN-OS-Releases/ta-p/52882.
Issue ID
Description
WINAGENT-398
When the User-ID agent restarts, it loads the existing IP address-to-username mappings but with an incorrect username value if the username has a space. The ability to fetch IP address-to-username mappings from AD or other sources is not impacted even when usernames have a space.
WINAGENT-244
This issue is now resolved. SeeUser-ID Agent 8.0.8 Addressed Issues.
The Windows-based User-ID agent does not detect users whose account name (sAMAccountName) contains a dollar ($) character that isn't at the end of the name.
WINAGENT-142
This issue is now resolved. SeeUser-ID Agent 8.0.2 Addressed Issues.
Test Connection (MDM IntegrationSetupTest Connection) for the MDM integration service returns a Test Failed message even when the integration service successfully connects to the AirWatch MDM service.
Workaround: Refer to the top-level MDM Integration tab to view the correct connection status.
WINAGENT-141
This issue is now resolved. SeeUser-ID Agent 8.0.3 Addressed Issues.
The MDM integration service of the Windows-based User-ID agent rejects connections from MDM event notification service if the IP Address of the MDM event notification service is not configured as a Permitted IP address (MDM IntegrationSetupPermitted IP).
WINAGENT-133
This issue is now resolved. SeeUser-ID Agent 8.0.1 Addressed Issues.
The Windows-based User-ID agent has a memory leak while running the MDM Integration Service.
WINAGENT-122
This issue is now resolved. SeeUser-ID Agent 8.0.2 Addressed Issues.
The Windows-based User-ID agent frequently resets its connection with a syslog sender, causing the sender to generate numerous connection failure logs and associated alerts.
WINAGENT-109
This issue is now resolved. SeeUser-ID Agent 8.0.1 Addressed Issues.
The Windows-based User-ID agent attempts to contact the certificate store on the agent even though this step is not necessary when hashes match. As a result, authentication fails even for matching hash-es when the certificate store on the agent is inaccessible.
WINAGENT-90
This issue is now resolved. SeeUser-ID Agent 8.0.1 Addressed Issues.
The Windows-based User-ID agent running the MDM integration service can fail during startup and require a restart. This issue is caused by a Windows module (webio.dll) that faults and appears in Windows Event ViewerApplications.
WINAGENT-65
This issue is now resolved. SeeUser-ID Agent 8.0.2 Addressed Issues.
When the PAN-OS XML API sends user mappings with no timeout value to a Windows-based User-ID agent, the agent sets the mappings timeout to never instead of applying the User Identification Timeout setting.

Related Documentation