Threat log original destination required in vm firewall deployed in aws ..

[omprasadax]

Hi Team,
We have vm firewall deployed at AWS. 

>> Paloalto>>ALB>> servers

Now in threat log we are getting logs for destination as ALB  because of this architecture.

Is it possible to get logs for actual destination server in threat log by any means ?

Thanking you in advance!!