Changes to Default Behavior

Familiarize yourself with the changes to default behavior introduced in the Windows User-ID™ agent 8.1 release.
The Windows-based User-ID™ Agent 8.1 release has the following changes to default behavior.
Feature
Change
Support for Multiple Username Formats
  • Since multiple username attributes are supported, you must select the Primary Username attribute that you want to use for user identification.
  • Previously, the firewall normalized usernames received from User-ID sources (such as an LDAP directory) to the
    domain\username
    format. In PAN-OS® 8.1, when the
    Primary Username
    is in UPN format, it will not be normalized as in previous PAN-OS versions. As a result, usernames are displayed in their original format (for example,
    username@domain
    ).

Related Documentation