Changes to Default Behavior

Familiarize yourself with the changes to default behavior introduced in the Windows User-ID™ agent 8.1 release.
The Windows-based User-ID™ Agent 8.1 release has the following changes to default behavior.
FeatureChange
Support for Multiple Username Formats
  • Since multiple username attributes are supported, you must select the Primary Username attribute that you want to use for user identification.
  • Previously, the firewall normalized usernames received from User-ID sources (such as an LDAP directory) to the domain\username format. In PAN-OS® 8.1, when the Primary Username is in UPN format, it will not be normalized as in previous PAN-OS versions. As a result, usernames are displayed in their original format (for example, username@domain).

Related Documentation