topic Re: Which field in TP Packet is used by MUHv2 for tagging in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165771#M29749 <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk164998&amp;partition=Basic&amp;product=Identity" target="_blank">sk164998: Terminal Server Agent v2 (MUH2) - FAQ</A></P> <P>&nbsp;</P> Wed, 21 Dec 2022 10:37:17 GMT G_W_Albrecht 2022-12-21T10:37:17Z Which field in TP Packet is used by MUHv2 for tagging https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165758#M29744 <P>Hello community,</P><P>we have several terminal servers with MuHv2. We can see Identity Awarenss login/logout events on these terminal servers.<BR />We indeed do not see any traffic from these terminal servers with user identities and therefore AccessRoles not matching.<BR />We wanted to find out with packet capture, it the MuHv2 is tagging the packets and if tagged packets are arriving at the Gateways.</P><P>Is there any information or documentation, which part of the packet is used for MuHv2 identity packet tagging ?</P><P>In MuHv1, it was Source port numbers - in MuHv2, we heared that's some unsed part of packet header.</P><P>KR, Peter</P> Wed, 21 Dec 2022 09:02:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165758#M29744 Peter_Thome 2022-12-21T09:02:38Z Re: Which field in TP Packet is used by MUHv2 for tagging https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165771#M29749 <P><A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk164998&amp;partition=Basic&amp;product=Identity" target="_blank">sk164998: Terminal Server Agent v2 (MUH2) - FAQ</A></P> <P>&nbsp;</P> Wed, 21 Dec 2022 10:37:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165771#M29749 G_W_Albrecht 2022-12-21T10:37:17Z Re: Which field in TP Packet is used by MUHv2 for tagging https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165781#M29750 <P>We use the Identification Header.</P> Wed, 21 Dec 2022 13:31:04 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Which-field-in-TP-Packet-is-used-by-MUHv2-for-tagging/m-p/165781#M29750 PhoneBoy 2022-12-21T13:31:04Z