User-ID Agent 9.0 Addressed Issues

Want to know if there are any addressed issues related to the Windows User-ID™ agent 9.0 release?
The following User-ID agent 9.0 releases contain issues that were addressed in those maintenance releases. All other User-ID agent 9.0 releases were created only to maintain parity with Terminal Server (TS) agent releases and do not introduce any newly addressed issues. For new features, associated software versions, known issues, or changes in default behavior, see User-ID Agent 9.0 Release Information.
For recent updates to addressed issues for a given PAN-OS® release, refer to live.paloaltonetworks.com/t5/Articles/Critical-Issues-Addressed-in-PAN-OS-Releases/ta-p/52882.

User-ID Agent 9.0.5 Addressed Issues

Issue
Description
WINAGENT-607
Fixed an issue where an error occurred when integrating the User-ID agent with AirWatch mobile device management (MDM) for compiling host information profile (HIP) reports for GlobalProtect on mobile endpoints. The agent failed to retrieve HIP reports related to mobile devices with unique device identifiers (UDIDs) containing uppercase letters (for example, Apple iPhone XS or XR) with the following error message:
Unable to get device from cache
.
WINAGENT-591
Fixed an issue where users in the Windows User-ID agent
Ignore User List
were not ignored when in User Principle Name (UPN) format.
WINAGENT-587
Fixed an issue when importing the bloom filter where the User-ID credential agent failed to decode characters with umlauts (such as ä, ö, or ü).
WINAGENT-579
Fixed an issue where if syslog messages did not contain usernames, configuring the User-ID agent to parse syslogs to extract IP address-to-username mappings resulted in the agent sending incorrect mappings with empty usernames.
WINAGENT-557
Fixed an issue where integrating the User-ID agent with AirWatch mobile device manager (MDM) for compiling GlobalProtect host information profile (HIP) reports pertaining to mobile devices resulted in the agent not sending updated HIP reports in real-time following an update from the MDM.

User-ID Agent 9.0.4 Addressed Issues

Issue
Description
WINAGENT-571
Fixed an issue where after you configured the syslog monitor server with a default domain name the log out event did not append the name, which prevented the deletion of the User-ID™ mapping from the Windows User-ID agent.
WINAGENT-564
Fixed an issue where a memory leak condition occurred when you configured User-ID as a syslog listener.
WINAGENT-469
Fixed an issue where the firewall did not detect user credentials when the number of users exceeded 60,000. To leverage this fix, you must upgrade firewalls to PAN-OS 9.0.4 or a later PAN-OS 9.0 release.

User-ID Agent 9.0.3 Addressed Issues

Issue
Description
WINAGENT-493
Fixed an issue where Windows User-ID agent did not delete IP user mappings after the Syslog server received the log out event.

User-ID Agent 9.0.2 Addressed Issues

Issue
Description
WINAGENT-530
Fixed an issue where User-ID Agent installed on a Windows Server 2012 R2 and Windows Server 2016 did not connect to a domain controller running on a Windows Server 2019.
WINAGENT-523
Fixed an issue where the user-to-IP address process took longer than expected after a Windows security event.
WINAGENT-513
Fixed an intermittent issue where the user-to-IP address process took longer than expected when a larger than expected number of machine entries were sent to the firewall.
WINAGENT-490
Fixed an issue where the Ignore User List (
Device
User Identification
Edit
Ignore User List
) did not ignore User Principal Name (UPN) formatted user-to-IP address mapping entries.

User-ID Agent 9.0.1 Addressed Issues

This User-ID agent 9.0 release has no updates or addressed issues. The User-ID agent 9.0.1 release was provided to maintain parity with TS agent 9.0 releases.

User-ID Agent 9.0.0 Addressed Issues

This User-ID agent 9.0 release has no updates or addressed issues. The User-ID agent 9.0.0 release was provided to maintain parity with PAN-OS and TS agent 9.0 releases.

Recommended For You