Device > User Identification > User-ID Agents
To map usernames to IP addresses, User-ID agents monitor various sources, such as directory servers. The agents send the user mappings to firewalls, Log Collectors, or Panorama and each of these appliances can then serve as
redistribution pointsthat forward the mappings to other firewalls, Log Collectors, or Panorama. For a firewall (
) or Panorama (
) to collect user mappings, you must configure its connections to the User-ID agents or redistribution points.
To configure Dedicated Log Collectors to connect to User-ID agents or redistribution points, define User-ID Agent Settings. You cannot configure local Log Collectors to connect to User-ID agents or redistribution points.
Although you can configure a Log Collector or Panorama to redistribute user mappings, these devices cannot map IP addresses to usernames. Only Windows-based User-ID agents and PAN-OS integrated User-ID agents can perform user mapping.
The complete procedure to configure user mapping requires additional tasks besides configuring connections to User-ID agents.
Redistribute User-ID Information to Managed Firewalls
Redistribute User-ID Information to Managed Firewalls To ensure all the firewalls that enforce policies and generate reports have the required IP address-to-username mappings and authentication ...
User-ID Redistribution Using Panorama
User-ID Redistribution Using Panorama One of the key benefits of the Palo Alto Networks firewall is that it can enforce policies and generate reports based ...
Configure Access to User-ID Agents
Configure Access to User-ID Agents Each firewall and Panorama management server can connect to a maximum of 100 User-ID agents or User-ID redistribution points (or ...
Manage Access to User-ID Agents
Manage Access to User-ID Agents Perform the following tasks for managing connections from the firewall to User-ID agents or redistribution points. Task Description Display information ...
User-ID Agent Settings
User-ID Agent Settings Panorama > Managed Collectors > User-ID Agents A Dedicated Log Collector can receive user mappings from up to 100 User-ID agents. The ...
Redistribute HIP Reports
Redistribute HIP Reports To ensure consistent Host Information Profile (HIP) policy enforcement and to simplify policy management, you can distribute HIP reports received from the ...
Configure User-ID Redistribution
Configure User-ID Redistribution Before you configure User-ID redistribution: Plan the redistribution architecture. Some factors to consider are: Which firewalls will enforce policies for all users ...
HIP Report Redistribution
HIP Report Redistribution To ensure consistent Host Information Profile (HIP) policy enforcement and to simplify policy management, the HIP Report Redistribution feature enables you to ...
Redistribution Device User Identification User Mapping Palo Alto Networks User-ID Agent Setup Redistribution To enable a firewall or virtual system to serve as a User-ID ...