About thenetworksfine

thenetworksfine

What is the recommended firewall solution to provide an accurate username in a Citrix environment that will have multiple users accessing a server at the same time?

thenetworksfine · ‎02-25-2020

I am seeing a pattern where I observe an http_category in my pan:traffic logs where log_subtype=end but there is no dest_hostname or URL. Is it possible that Palo is classifying based on IP address? We are not decrypting SSL traffic in this instance and I see no other corresponding logs for the same traffic (pan:threat).

Date Registered	‎12-13-2019 06:29 AM
Date Last Visited	a week ago
Total Messages Posted	2

Online Status	Offline
Date Last Visited	a week ago

About thenetworksfine

Solution for inaccurate user field in firewall logs in Citrix environment

Traffic Logs have an http_category without a destination hostname or URL

Solution for inaccurate user field in firewall logs in Citrix environment

Traffic Logs have an http_category without a destination hostname or URL

Enterprise

Prisma

Cortex

About thenetworksfine

Solution for inaccurate user field in firewall logs in Citrix environment

Traffic Logs have an http_category without a destination hostname or URL

Solution for inaccurate user field in firewall logs in Citrix environment

Traffic Logs have an http_category without a destination hostname or URL