Is it possible to configure Agent User ID or Firewall or not to map a user?

[paloalto.nis]

Hello everyone,

I have a communication tool on each PC users that perform LDAP queries to my AD to retrieve information from other users.

This tool is using the same account (\ ccm), explain how to Palo Alto or rather the agent does not back this user?

The current problem is that in my logs all IPs of my users are raised with In User \ ccm name.

Thank you very much for your help.

[gswcowboy]

If your intention is to ignore a user from being mapped, please create an 'ignore_user_list.txt' file within the install directory for UID. Add the user in question similar to what I've done.

Restart the UID service and confirm you are no longer mapping that service account.

[mikand]

By the way, how come these settings arent available through the gui of the pan-agent?

And how do you put in this blacklist if you use the builtin pan-agent of a PANOS 5.x box (instead of a standalone)?

[mikand]

Thanks! 🙂

And what about why this isnt available through the gui of the pan-agent?

[panos]

Hard to answer that

maybe there is a feature request for this...maybe it is hard to do for them.(code handicap or something)

[mikand]

A simple workaround for the coders would be to at least create this as a menu option or a button somewhere in the gui which will open the textfile (and create it if it doesnt exist) through default app for .txt files.