Focus

PAN-OS Web Interface Reference

Ignore User List

Table of Contents

Ignore User List

DeviceUser IdentificationUser MappingPalo Alto Networks User-ID Agent SetupIgnore User List

The ignore user list defines which user accounts don’t require IP address-to-username mapping (for example, kiosk accounts). To configure the list, click Add and enter a username. You can use an asterisk as a wildcard character to match multiple usernames but only as the last character in the entry. For example, corpdomain\it-admin* matches all administrators in the corpdomain domain whose usernames start with the string it‑admin. You can add up to 5,000 entries to exclude from user mapping.

Define the ignore user list on the firewall that is the User-ID agent, not the client. If you define the ignore user list on the client firewall, the users in the list are still mapped during redistribution.

Syslog Filters

Monitor Servers