User-ID Components

Palo Alto Networks Fireewall

• Maps IP addresses to usernames
• Maps usernames to group names

PAN-OS Integrated User-ID Agent

• Runs on the firewall
• Collects IP address to username information

Windows-based User-ID Agent

• Runs on a domain member
• Collects IP address-to-username information
• Sends information to the firewall

Palo Alto Networks Terminal Services Agent

• Runs on Micorsoft and Citrix terminal servers
• Collects IP and port nubmer to username information
• Sends information to the firewall

User Mapping —

• Server Monitoring
• Port Mapping
• Syslog
• XFF Headers
• Username Header Insertion
• Authentication Policy and Authentication Portal
• GlobalProtect
• XML API
• Client Probing