Ignore User List

  • Device
    User Identification
    User Mapping
    Palo Alto Networks User-ID Agent Setup
    Ignore User List
The ignore user list defines which user accounts don’t require IP address-to-username mapping (for example, kiosk accounts). To configure the list, click
Add
and enter a username. You can use an asterisk as a wildcard character to match multiple usernames but only as the last character in the entry. For example,
corpdomain\it-admin*
matches all administrators in the
corpdomain
domain whose usernames start with the string
it‑admin
. You can add up to 5,000 entries to exclude from user mapping.
Define the ignore user list on the firewall that is the User-ID agent, not the client. If you define the ignore user list on the client firewall, the users in the list are still mapped during redistribution.

Related Documentation