PanAgent - Ignore specific users?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

PanAgent - Ignore specific users?

Not applicable

I believe its possible to ignore specific usernames with the AD PanAgent?  How can this be done?  I have machines that are running AV agents and rebuild agents that login and logout at various points this overriding the actual user details.

1 accepted solution

Accepted Solutions

L4 Transporter

It sounds like you want to ignore certain users like service accounts.  This can be done by creating a text file called "ignore_user_list.txt" that includes the usernames you want to ignore.  Put each username on its own line (you do not need to prepend the domain).  Put this file in the directory where the PAN Agent is installed.  Typically this is C:\Program Files\Palo Alto Networks\PanAgent.  Restart the agent and you should be good to go.

View solution in original post

2 REPLIES 2

L5 Sessionator

You can create an allow/ignore list on the PAN agent and list devices as appropriate by IP or host name.  On the device where the PAN agent is intstallad go to Start >Palo Alto Networks > User Identification Agent, then select the Configure button on the right side.  You will see  the boxes to create the Allow and Ignore lists.  The ageent will not attempt to resolve any addresses in the Ignore List.

L4 Transporter

It sounds like you want to ignore certain users like service accounts.  This can be done by creating a text file called "ignore_user_list.txt" that includes the usernames you want to ignore.  Put each username on its own line (you do not need to prepend the domain).  Put this file in the directory where the PAN Agent is installed.  Typically this is C:\Program Files\Palo Alto Networks\PanAgent.  Restart the agent and you should be good to go.

  • 1 accepted solution
  • 3358 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!