Device > User Identification
> User Mapping > Palo Alto Networks User-ID Agent Setup > User Ignore
The ignore user list defines which user accounts don’t require
IP address-to-username mapping (for example, kiosk accounts). To
configure the list, click
and enter a
username. You can use an asterisk as a wildcard character to match
multiple usernames but only as the last character in the entry.
matches all administrators
domain whose usernames start with the string
You can add up to 5,000 entries to exclude from user mapping.
Define the ignore user list on the firewall
that is the User-ID agent, not the client. If you define the ignore
user list on the client firewall, the users in the list are still mapped