Hot!Meaning of unauthuser and unauthusersource

New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/04/20 16:18:34
  • Status: offline
2020/04/20 16:22:47 (permalink)

Meaning of unauthuser and unauthusersource


Can anyone tell me the meaning of unauthuser and unauthusersource in the logs?

Oct 30 11:14:50 date=2013-10-30 time=11:14:50 devname=FG100D3 devid=FG100D3
logid=0315013317 type=utm subtype=webfilter eventtype=urlfilter level=notice vd=" root"
policyid=30 identidx=0 sessionid=21843402 srcname=" MacBook-MacBook-Pro-de-B.local"
osname=" Mac OS X" osversion=" 10.8.5" unauthuser=" bj" unauthusersource=" forticlient"
srcip= srcport=60038 srcintf=" internal2" dstip= dstport=80
dstintf=" ISP-Colt" service=" http" hostname="" profiletype=" Webfilter_Profile"
profile=" default" status=" passthrough" reqtype=" referral"
url=" /nagios3/images/comment.gif" sentbyte=633 rcvdbyte=187
msg=" URL has been visited" method=domain class="0" cat=255

In other logs appear dstunauthusersource and dstunauthuser, what is the meaning?

Thanks so much

1 Reply Related Threads

    Platinum Member
    • Total Posts : 476
    • Scores: 42
    • Reward points: 0
    • Joined: 2012/04/18 12:13:27
    • Location: Prague / Czech Republic
    • Status: offline
    Re: Meaning of unauthuser and unauthusersource 2020/11/23 03:43:11 (permalink)
    I am also intrested in this. I can see logs with "unauthusersource="kerberos" and I can see users in the logs as unauthuser that contains username that is disabled and not belongs to any user group.
    Where this unauthuser value comes from?

    NSE 8, CCNP R+S
    Jump to:
    © 2021 APG vNext Commercial Version 5.5