topic Re: Identity Awareness - Multiple Users as Source User Name in Firewall and Security Management

Identity Awareness - Multiple Users as Source User Name

nemezis_rock — Thu, 10 Aug 2023 10:55:40 GMT

Hi all!

I've enabled Identity Awareness. First it looked fine. But when I tried to Login to the same workstation using different account the problem is appeared...

In logs it shows two User Sources from one machine at the same time. One of them is Disconnected or Signed Off.

How to fix this?

Thanks in advance.

Re: Identity Awareness - Multiple Users as Source User Name

_Val_ — Thu, 10 Aug 2023 10:57:17 GMT

Version, configuration details?

Re: Identity Awareness - Multiple Users as Source User Name

nemezis_rock — Thu, 10 Aug 2023 11:12:41 GMT

R81.10 JHT 109.

Configured Active Directory Query as Identity Source.

Querying is fine but it show two users. Workstation is Windows 10 machine.

Here is "adlog a q a" output. One IP and three users on a single Machine. Only one user is active.

Re: Identity Awareness - Multiple Users as Source User Name

nemezis_rock — Thu, 10 Aug 2023 11:57:36 GMT

After analyzing "pdp m ip x.x.x.x (workstation ip address)" I noticed this:

So, the problem was that SG was allowing multiple users and saving their sessions. After that, I've re-checked Identity Awareness Blades Configuration. Go to Security Gateway -> Identity Awareness -> Active Directory Query - Settings and ticked:

So from that moment, SG is saving only one - active user's session on the machine.

Thanks.

Re: Identity Awareness - Multiple Users as Source User Name

_Val_ — Thu, 10 Aug 2023 12:28:31 GMT

Thanks for sharing, I am happy you resolved it.