https://live.paloaltonetworks.com/t5/advanced-threat-prevention/no-entry-in-the-user-agent-field-in-threat-logs/m-p/466830#M1505 <P>[Edited] Nevermind... I originally read the question as not getting UserID, as opposed to the actual question of not getting the browser User-Agent.</P> Fri, 18 Feb 2022 17:20:23 GMT Adrian_Jensen 2022-02-18T17:20:23Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/no-entry-in-the-user-agent-field-in-threat-logs/m-p/466491#M1502 <P>Hi All,</P><P>&nbsp;</P><P>We had recently got threat log entries on the PA firewall. While checking the logs the Browser "User-Agent" column in the threat field is empty.</P><P>&nbsp;</P><P>While reading the documentations it is advised that this filed will be populated only for HTTP traffic.</P><P>&nbsp;</P><P>We had Web-Browsing in the application field and traffic being destined to destination port 80 still we have not got any entries on the&nbsp;"User-Agent" column.</P><P>&nbsp;</P><P>Please let me know if any changes need to be made on the firewall for this field to be populated</P><P>&nbsp;</P><P>Thanks in Advance!</P> Sat, 19 Feb 2022 06:47:27 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/no-entry-in-the-user-agent-field-in-threat-logs/m-p/466491#M1502 tamilvanan 2022-02-19T06:47:27Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/no-entry-in-the-user-agent-field-in-threat-logs/m-p/466830#M1505 <P>[Edited] Nevermind... I originally read the question as not getting UserID, as opposed to the actual question of not getting the browser User-Agent.</P> Fri, 18 Feb 2022 17:20:23 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/no-entry-in-the-user-agent-field-in-threat-logs/m-p/466830#M1505 Adrian_Jensen 2022-02-18T17:20:23Z