Certain firewalls (palo alto) allow user name discovery through syslog parsing. I was told by ruckus support that hostname cannot be passed in syslog. Need to map hostname to ip address for addresses originating with ruckus connection even if not in active directory