SpanVA - AD Sync: Syncing the same user account from multiple Spanva LDAP profiles or multiple SpanVA Instances

Products

• CASB Audit

Issue/Introduction

The user data synced from Active Directory may overlap due to multiple SpanVA servers or AD Sync Profiles uploading the same set of users. It could also happen due to the definition of the base DN or the LDAP filters used.

Environment

On-prem SpanVA

Resolution

The AD Sync updates the user account in CloudSOC with the most recent data uploaded from the SpanVA profile. The user information from the latest update will always override what data is on the Cloud.

In some instances, this could cause the user in CloudSOC to not have the latest metadata due to inconsistencies in the timing of the user sync from different SpanVAs or different ADSync Profiles on the SpanVA.