Enable User-ID on the source zones containing the GlobalProtect users that send
requests requiring HIP-based access controls. You must enable User-ID, otherwise the
firewall cannot generate any HIP Match logs entries.
Select NetworkZones
Click the Name of the zone on which you want to enable User-ID.