Hi senspersons I guess that this is Windows server with some service running with user account. In the example it is "scott". You can tell the User-ID Agent to ignore that particular user account. To do this, create a file called “ignore_user_list.txt” in the directory in which the User-ID Agent was installed (typically c:\Program Files\Palo Alto Networks\PanAgent). Put in that file the name of the service account that you want the User-ID Agent to ignore. the ignore_user_list.txt file requires one user name per line with no domain preprend. e.g. joesmith janedoe administrator av-admin Also, you may want to clear the user cache via the CLI. admin@PA-2050> clear user-cache > all Clear all ip to user cache in data plane > ip Clear the specified ip to user cache in data plane Regards Slawek
... View more