About LeFwAdmins

Hi!   We found out, that it is not possible to track the user when he starts a Windows-File-Explorer via Citrix. Source-Port is used from the System-Context and not from the User-Context. This behaivour is confirmed by Palo Alto, and it seems to be similar to https://live.paloaltonetworks.com/t5/General-Topics/TS-Agent-no-port-mapping-when-using-windows-net-use/m-p/257607#M73083 https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkCCAS   So what I would like to know: Are we the only customers that try to provide a File-Explorer (also valid when e.g. opening files within Office-Products) via Citrix, trying to track the user using the TSA? Wouldn't that be a base feature that should be provided and also tested before release of the product by Palo Alto as Vendor of the TSA? At least such constraint should also be highlighted more clearly to the customers (e.g. directly in the white paper). As a user I would expect that such built in functionality of windows is also tested during the QA process. It would be great if others could confirm that they have the same problem or suggest some workarounds. We really would like to avoid providing individual Terminal-Servers per User-Group accessing the server.   Kind Regards Walter ... View more