https://live.paloaltonetworks.com/t5/general-topics/auto-tag-xff-ip/m-p/392781#M90953 <P>If you use the XFF as a user ID it can be done by just like tagging a normal IP address with a dinamic group and log forwarding profile:</P><P>&nbsp;</P><P>Device&gt;Setup&gt;Content-ID&gt;X-Forwarder-for Headers &gt; Use X-Forwarder-for as UserID</P><P>&nbsp;</P><P><A href="https://live.paloaltonetworks.com/t5/general-topics/configuring-xff-logging-without-a-url-filtering-license/td-p/239987" target="_blank" rel="noopener">https://live.paloaltonetworks.com/t5/general-topics/configuring-xff-logging-without-a-url-filtering-license/td-p/239987</A></P> Mon, 22 Mar 2021 17:52:06 GMT nikoolayy1 2021-03-22T17:52:06Z https://live.paloaltonetworks.com/t5/general-topics/auto-tag-xff-ip/m-p/325220#M82962 <P>Is there a way to auto TAG - XFF ip's in log forwarding profile</P> Tue, 28 Apr 2020 19:59:32 GMT https://live.paloaltonetworks.com/t5/general-topics/auto-tag-xff-ip/m-p/325220#M82962 raji_toor 2020-04-28T19:59:32Z https://live.paloaltonetworks.com/t5/general-topics/auto-tag-xff-ip/m-p/392781#M90953 <P>If you use the XFF as a user ID it can be done by just like tagging a normal IP address with a dinamic group and log forwarding profile:</P><P>&nbsp;</P><P>Device&gt;Setup&gt;Content-ID&gt;X-Forwarder-for Headers &gt; Use X-Forwarder-for as UserID</P><P>&nbsp;</P><P><A href="https://live.paloaltonetworks.com/t5/general-topics/configuring-xff-logging-without-a-url-filtering-license/td-p/239987" target="_blank" rel="noopener">https://live.paloaltonetworks.com/t5/general-topics/configuring-xff-logging-without-a-url-filtering-license/td-p/239987</A></P> Mon, 22 Mar 2021 17:52:06 GMT https://live.paloaltonetworks.com/t5/general-topics/auto-tag-xff-ip/m-p/392781#M90953 nikoolayy1 2021-03-22T17:52:06Z