Device > User Identification > User-ID Agents
To map usernames to IP addresses, User-ID agents monitor various sources, such as directory servers. The agents send the user mappings to firewalls, Log Collectors, or Panorama and each of these appliances can then serve as
redistribution pointsthat forward the mappings to other firewalls, Log Collectors, or Panorama. For a firewall (
) or Panorama (
) to collect user mappings, you must configure its connections to the User-ID agents or redistribution points.
To configure Dedicated Log Collectors to connect to User-ID agents or redistribution points, define User-ID Agent Settings. You cannot configure local Log Collectors to connect to User-ID agents or redistribution points.
Although you can configure a Log Collector or Panorama to redistribute user mappings, these devices cannot map IP addresses to usernames. Only Windows-based User-ID agents and PAN-OS integrated User-ID agents can perform user mapping.
The complete procedure to configure user mapping requires additional tasks besides configuring connections to User-ID agents.
Panorama and Log Collectors as User-ID Redistribution Points
Panorama and Log Collectors as User-ID Redistribution Points You can now leverage your Panorama and distributed log collection infrastructure to redistribute User-ID mappings in large-scale ...
Redistribute User-ID Information to Managed Firewalls
Redistribute User-ID Information to Managed Firewalls To ensure all the firewalls that enforce policies and generate reports have the required IP address-to-username mappings and authentication ...
User-ID Redistribution Using Panorama
User-ID Redistribution Using Panorama One of the key benefits of the Palo Alto Networks firewall is that it can enforce policies and generate reports based ...
Configure Access to User-ID Agents
Configure Access to User-ID Agents Each firewall and Panorama management server can connect to a maximum of 100 User-ID agents or User-ID redistribution points (or ...
Manage Access to User-ID Agents
Manage Access to User-ID Agents Perform the following tasks for managing connections from the firewall to User-ID agents or redistribution points. Task Description Display information ...
User-ID Agent Settings
User-ID Agent Settings Panorama > Managed Collectors > User-ID Agents A Dedicated Log Collector can receive user mappings from up to 100 User-ID agents. The ...
User-ID Features New User-ID Features Description Panorama and Log Collectors as User-ID Redistribution Points You can now leverage your Panorama™ and distributed log collection infrastructure ...
User-ID Features Panorama and Log Collectors as User-ID Redistribution Points Centralized Deployment and Management of User-ID and TS Agents User Groups Capacity Increase User-ID Syslog ...
Configure User-ID Redistribution
Configure User-ID Redistribution Before you configure User-ID redistribution: Plan the redistribution architecture. Some factors to consider are: Which firewalls will enforce policies for all users ...