topic Re: Specific domain controller in IA logs in Firewall and Security Management

Specific domain controller in IA logs

Egor_Cherkasov — Wed, 22 Apr 2020 07:41:12 GMT

Hello CheckMates!

Where in Smart Log may I find specific DC which authenticated domain user? I see only users' machines, their names and ldap groups.

Many thanks in advance!

Re: Specific domain controller in IA logs

PhoneBoy — Fri, 24 Apr 2020 15:24:16 GMT

Pretty sure we don't capture that (@Royi_Priov can confirm).
Or if we do, it's not in the logs.
It's possible this is shown in the various pdp/pep debugging commands on the CLI.

Why is this a relevant piece of information to appear in the logs?

Re: Specific domain controller in IA logs

Egor_Cherkasov — Mon, 27 Apr 2020 07:16:06 GMT

Hello,

Thank you for the answer. TAC answered that this piece of information cannot be seen in logs either in SmartLog or in Identity Collector logs. It does not matter for the Gateway from which DC the Identity was fetched, but what dose really matter that the Identity is there and the Gateway can authenticate by fetching it.

The customer has different users' databases on the different DCs.

In order to obtain this information a user can enter in cmd.exe the following command:

echo %logonserver%