User-ID Agent 8.0 Addressed Issues
The following tables list the issues that are addressed in the User-ID™ agent 8.0 releases. For new features, associated software versions, known issues, or changes in default behavior, see User-ID Agent 8.0 Release Information.
User-ID Agent 8.0.5 Addressed Issues
Issue ID Description
WINAGENT-243 Fixed an issue on the Windows-based User-ID agent where the MDM integration service for VMware Airwatch stopped running while processing large host information profile (HIP) reports. With this fix, the MDM integration service supports HIP reports of up to 50KB; when necessary, GlobalProtect truncates the applications list to ensure the report size remains within the maximum size.
WINAGENT-224 Fixed an issue where firewalls running PAN-OS 6.1 could not connect to Windows-based User-ID agents 8.0.4 and earlier versions because the agents did not allow TLSv1.0 connections. With this fix, Windows-based User-ID agents 8.0.5 and later versions allow TLSv1.0 connections with firewalls running PAN-OS 6.1.
WINAGENT-220 Fixed an issue where the firewall incorrectly blocked URLs due to a higher than expected rate of false positives when users entered non-corporate passwords to access websites after you configured the Windows-based User-ID agent to detect credential submissions ( User Identification > Setup > Edit > Credentials).
User-ID Agent 8.0.4 Addressed Issues
Issue Identifier Description
WINAGENT-34 Fixed an issue where the Windows User-ID agent allowed weak ciphers for SSL/TLS connections. With this fix, the Windows User-ID agent allows only the following ciphers for SSL/TLS connections: ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-SHA256 DHE-RSA-AES256-SHA256 DHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-AES128-SHA AES256-SHA256 AES256-SHA AES128-SHA256 AES128-SHA
User-ID Agent 8.0.3 Addressed Issues
Issue Identifier Description
PAN-68824 Fixed an issue where the Windows-based User-ID agent performed IP address-to-username mapping for user accounts that were in the Ignore User list (ignore_user_list.txt).
User-ID Agent 8.0.2 Addressed Issues
Issue Identifier Description
WINAGENT-122 Fixed an issue where the Windows-based User-ID agent frequently reset its connection with a syslog sender, causing the sender to generate numerous connection failure logs and associated alerts.
User-ID Agent 8.0.1 Addressed Issues
Issue Identifier Description
WINAGENT-109 Fixed an issue where the Windows-based User-ID agent attempted to access the certificate store on the agent even when hashes match, which caused authentication to fail even for matching hashes if the certificate store on the agent was inaccessible.
User-ID Agent 8.0.0 Addressed Issues
Issue Identifier Description
PAN-60400 Fixed an issue where the username displayed as a concatenated string (username+IP address) when learned from the User-ID agent instead of through the firewall. With this fix, the username displays correctly (without IP address).

Related Documentation