PanAgent - Ignore specific users?

[djmac]

I believe its possible to ignore specific usernames with the AD PanAgent?  How can this be done?  I have machines that are running AV agents and rebuild agents that login and logout at various points this overriding the actual user details.

[nrice]

You can create an allow/ignore list on the PAN agent and list devices as appropriate by IP or host name.  On the device where the PAN agent is intstallad go to Start >Palo Alto Networks > User Identification Agent, then select the Configure button on the right side.  You will see  the boxes to create the Allow and Ignore lists.  The ageent will not attempt to resolve any addresses in the Ignore List.

[kbrazil · Accepted solution]

It sounds like you want to ignore certain users like service accounts.  This can be done by creating a text file called "ignore_user_list.txt" that includes the usernames you want to ignore.  Put each username on its own line (you do not need to prepend the domain).  Put this file in the directory where the PAN Agent is installed.  Typically this is C:\Program Files\Palo Alto Networks\PanAgent.  Restart the agent and you should be good to go.