In environments with multi-user systems—such as Microsoft
Terminal Server or Citrix environments—many users share the same
IP address. In this case, the user-to-IP address mapping process
requires knowledge of the source port of each client. To perform
this type of mapping, you must install the Palo Alto Networks Terminal
Services Agent on the Windows/Citrix terminal server itself to intermediate the
assignment of source ports to the various user processes. For terminal
servers that do not support the Terminal Services agent, such as
Linux terminal servers, you can use the XML API to send user mapping
information from login and logout events to User-ID. See
Configure User Mapping for Terminal Server Users for
configuration details.