User-ID

Buy or Renew

User-ID

User and group information must be directly integrated into the technology platforms that secure modern organizations. Knowing who is using the applications on your network, and who may have transmitted a threat or is transferring files, strengthens security policies and reduces incident response times. User-ID, a standard feature on Palo Alto Networks next-generation firewalls, enables you to leverage user information stored in a wide range of repositories.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
HungTrinh 11-21-2025	High Data Plane Utilization During Business Hours Hello, We are experiencing an issue that is becoming hard to isolate, our end users noticed network slowness about a few days ago. During Isolatio... — Read more posted in Next-Generation Firewall Discussions	34	0
gtaboy34 11-20-2025	Issue with allowing AnyDesk on a no-internet policy Hey, I have a need to block all internet traffic at a specific site. I have created specific policies to allow needed services, and at the bottom of t... — Read more posted in Next-Generation Firewall Discussions	60	0
SBegass 11-19-2025	Limit User-ID Agent queries to cerain Windows event-IDs We have been using PA-User-ID Agent for years an it was working fine. The Agent is connecting to Domain-Controller Log and maps user-name and ip-addre... — Read more posted in Next-Generation Firewall Discussions	61	0
S.Cain 11-17-2025	User-ID & LDAPS service account AD permissions Can someone please tell me what all AD membership permissions are required for a service account for User-ID agent and LDAPS. posted in Next-Generation Firewall Discussions	393	3
P.Auguste 11-17-2025	ChatGPT User-ID, AD and IP mapping issue There is an issue with Palo Alto firewall which has to do with user IP mapping and AD. User is grated access via policy in the format source-user = co... — Read more posted in Next-Generation Firewall Discussions	358	1

Blogs

Supercharge Your Web Security: Announcing PA-5450 Support for Web Proxy

11-18-2025 — We're excited to announce full Web Proxy support on the high-performance PA-5450 Next-Generation Firewall with PAN-OS 12.1.2 (Orion). This allows you to consolidate your security stack, leveraging the PA-5450’s power for full SSL decryption, Advan... — Read more

Labels: Advanced Threat Prevention App-ID Data Loss Prevention DLP Next-Generation Firewall NGFW Orion PA-5450 PAN-OS 12.1.2 Security Consolidation SSL Decryption User-ID Web Proxy
236 by vekrishnan in Community Blogs

Palo Alto Networks Introduces PAN-OS® 12.1 Orion

09-09-2025 — Discover how PAN-OS® 12.1 Orion Major Features protects against tomorrow’s threats today. — Read more

Labels: AI Cloud Security Cybersecurity Decryption Hardware Networking Next-Generation Firewalls PAN-OS Product Announcement Quantum Security SD-WAN Security Operations Strata Cloud Manager Threat Prevention User-ID
4697 1 2 by kiwi in Community Blogs

Announcing VM-Series on AWS Connected Mobility Solutions (CMS) to Protect Your Connected Vehicles

12-19-2024 — Protect what drives you – starting today with VM-Series on AWS CMS — Read more

Labels: Advanced URL Filtering AWS Next Generation Firewall software firewalls User-ID VM Series VM-Series on AWS
2088 by alei in Community Blogs

Simplify User Access Without Upgrading Your Infrastructure With User Context

01-10-2023 — Palo Alto Networks identity team created User Context: a new tool to simplify and unify distribution of user-ID and other user mappings across all infrastructure for centralized visibility. — Read more

Labels: Cloud Identity Engine PAN-OS User Context User-ID
4851 1 by suppal in Community Blogs

DOTW: Windows Based UID Agent Vs. Agentless UID

06-07-2022 — Learn about the pros and cons of PAN-OS integrated user-ID and Windows-based user-ID agents in this Discussion of the Week column. — Read more

Labels: agentless user id discussion dotw Mapping User-ID User-ID & Authentication User-ID mapping
8933 1 6 by kiwi in Community Blogs

Articles

Cloud Identity Engine: Support for Entra B2B External User Authentication

12-03-2024 — Executive Summary Palo Alto Networks’ Cloud Identity Engine now supports Entra B2B external user authentication, unlocking secure access for partners, vendors, and external collaborators. This enhancement allows organizations to apply Zero Trust policies across both internal and external users,... — Read more

Labels: Cloud Identity Engine User-ID
3009 by jtmclaughlin in Cloud Identity Engine Articles

OpenID Connect Support in Cloud Identity Engine

08-13-2024 — The Cloud Identity Engine (CIE) is expanding its capabilities by introducing a new method for connecting to authentication services via OpenID Connect (OIDC). This enhancement provides an additional option alongside our existing support for CA Cha... — Read more

Labels: Cloud Identity Cloud Identity Engine OS versions 10.1 and above PAN-OS Prisma Access User-ID
3869 1 by jtmclaughlin in Cloud Identity Engine Articles

Attribute Based Dynamic User Groups

07-19-2024 — After synchronizing your directory with Cloud Identity Engine (CIE), you can create user groups in the CIE console. Use attribute-value pairs with operators like "contains," "starts with," and exact matches, and combine them with and/or operators. — Read more

Labels: Cloud Identity Cloud Identity Engine OS versions 10.1 and above PAN-OS Prisma Access User-ID
2953 by jtmclaughlin in Cloud Identity Engine Articles

Cloud Identity Engine Introduces On Demand Group Assignments

07-16-2024 — After synchronizing your directory with Cloud Identity Engine (CIE) you are now able to create groups of users within the CIE console. Users can be added to a group indefinitely or for specific time periods. These groups are never sent back to the... — Read more

Labels: Cloud Identity OS versions 10.1 and above PAN-OS Prisma Access User-ID
2055 by jtmclaughlin in Cloud Identity Engine Articles

Cloud Identity Engine Introduces Group Filtering When Collecting Groups from Entra ID

06-28-2024 — Cloud Identity Engine (CIE) now provides customers with the ability to select the groups they would like to synchronize with CIE from Entra ID (formerly Entra ID) by using filters. — Read more

Labels: Cloud Identity OS versions 10.1 and above PAN-OS Prisma Access User-ID
5157 2 by jtmclaughlin in Cloud Identity Engine Articles