Issue with Palo Alto User-ID Agent Mapping Delay and Incorrect User Identification

I’m currently working with Palo Alto Networks firewall integrated with Active Directory using the User-ID Agent installed on a Windows Server.

We are facing the following issues:

1. Delay in User Mapping
   • After user login, it takes 5–10 minutes for the firewall to correctly map IP to username.
2. Incorrect User Mapping
   • Sometimes the firewall shows the wrong user for an IP (possibly due to DHCP reuse).
3. Intermittent Mapping Loss
   • User mapping disappears randomly and then reappears after some time.