Palo Alto Networks User-ID Agent Setup

These settings define the methods that the User-ID agent uses to perform user mapping.

What are you looking for?	See:
Enable the User-ID agent to use Windows Management Instrumentation (WMI) to probe client systems or Windows Remote Management (WinRM) over HTTP or HTTPS to monitor servers for user mapping information.	Server Monitor Account
Monitor server logs for user mapping information with the User-ID agent.	Server Monitoring
Enable the User-ID agent to probe client systems for user mapping information.	Client Probing
Ensure that the firewall has the most current user mapping information as users roam and obtain new IP addresses.	Cache
Enable NT LAN Manager (NTLM) authentication for user mapping through Captive Portal.	NTLM Authentication
Enable firewalls to share user and group mapping information to simplify User-ID management.	Redistribution
Configure the User-ID agent to parse syslog messages for user mapping information.	Syslog Filters
Configure the User-ID agent to omit specific usernames from the mapping process.	Ignore User List

Document:PAN-OS Web Interface Reference