topic Re: PanAgent - Ignore specific users? in General Topics

PanAgent - Ignore specific users?

djmac — Thu, 20 May 2010 17:12:11 GMT

I believe its possible to ignore specific usernames with the AD PanAgent? How can this be done? I have machines that are running AV agents and rebuild agents that login and logout at various points this overriding the actual user details.

Re: PanAgent - Ignore specific users?

nrice — Thu, 20 May 2010 20:32:11 GMT

You can create an allow/ignore list on the PAN agent and list devices as appropriate by IP or host name. On the device where the PAN agent is intstallad go to Start >Palo Alto Networks > User Identification Agent, then select the Configure button on the right side. You will see the boxes to create the Allow and Ignore lists. The ageent will not attempt to resolve any addresses in the Ignore List.

Re: PanAgent - Ignore specific users?

kbrazil — Fri, 21 May 2010 19:50:34 GMT

It sounds like you want to ignore certain users like service accounts. This can be done by creating a text file called "ignore_user_list.txt" that includes the usernames you want to ignore. Put each username on its own line (you do not need to prepend the domain). Put this file in the directory where the PAN Agent is installed. Typically this is C:\Program Files\Palo Alto Networks\PanAgent. Restart the agent and you should be good to go.