User-ID maps IP addresses to usernames so policy and logs can refer to people and groups instead of addresses. That matters because addresses change constantly through DHCP, Wi-Fi roaming and VPNs, while a rule such as 'finance may reach the payroll app' should follow the person. The firewall does not guess: it learns mappings from sources you configure, and it applies them only in zones where User Identification is enabled.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.