PA Functionality Question: Log NTLM Header

[MelLi]

Hi Guys,

With a PA-3020, can I log the NTLM username of an authenticated HTTP request?

The situation:

• PA firewall is located between end users and proxy server
• Proxy provides NTLM authentication
• Can I log the username of each NTLM authentication request

Thanks,

Cheers,

Mel

[HULK]

Hello Mel,

Please look into this thread, this might help you. HTTP Header - Logging NTLM Username

Thanks

[MelLi]

Thanks Hulk! Much appreciated.

Cheers,

Mel