topic PA Functionality Question: Log NTLM Header in General Topics https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39796#M29182 <HTML><HEAD></HEAD><BODY><P>Hi Guys,</P><P></P><P>With a PA-3020, can I log the NTLM username of an authenticated HTTP request?</P><P></P><P><IMG alt="NTLM HTTP.png" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/18210_NTLM HTTP.png" style="height: auto;" /></P><P>The situation:</P><UL style="list-style-type: disc;"><LI>PA firewall is located between end users and proxy server</LI><LI>Proxy provides NTLM authentication</LI><LI>Can I log the username of each NTLM authentication request</LI></UL><P></P><P>Thanks,</P><P></P><P>Cheers,</P><P>Mel</P></BODY></HTML> Sun, 08 Feb 2015 23:50:27 GMT MelLi 2015-02-08T23:50:27Z PA Functionality Question: Log NTLM Header https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39796#M29182 <HTML><HEAD></HEAD><BODY><P>Hi Guys,</P><P></P><P>With a PA-3020, can I log the NTLM username of an authenticated HTTP request?</P><P></P><P><IMG alt="NTLM HTTP.png" class="image-0 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/18210_NTLM HTTP.png" style="height: auto;" /></P><P>The situation:</P><UL style="list-style-type: disc;"><LI>PA firewall is located between end users and proxy server</LI><LI>Proxy provides NTLM authentication</LI><LI>Can I log the username of each NTLM authentication request</LI></UL><P></P><P>Thanks,</P><P></P><P>Cheers,</P><P>Mel</P></BODY></HTML> Sun, 08 Feb 2015 23:50:27 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39796#M29182 MelLi 2015-02-08T23:50:27Z Re: PA Functionality Question: Log NTLM Header https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39797#M29183 <HTML><HEAD></HEAD><BODY><P>Hello Mel,</P><P></P><P>Please look into this thread, this might help you. <A href="https://live.paloaltonetworks.com/message/49256">HTTP Header - Logging NTLM Username</A></P><P></P><P>Thanks</P></BODY></HTML> Mon, 09 Feb 2015 05:08:09 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39797#M29183 HULK 2015-02-09T05:08:09Z Re: PA Functionality Question: Log NTLM Header https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39798#M29184 <HTML><HEAD></HEAD><BODY><P>Thanks Hulk! Much appreciated.</P><P></P><P>Cheers,</P><P>Mel</P></BODY></HTML> Mon, 09 Feb 2015 05:44:09 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-functionality-question-log-ntlm-header/m-p/39798#M29184 MelLi 2015-02-09T05:44:09Z