Which field in TP Packet is used by MUHv2 for tagging

[Peter_Thome]

Hello community,

we have several terminal servers with MuHv2. We can see Identity Awarenss login/logout events on these terminal servers.
We indeed do not see any traffic from these terminal servers with user identities and therefore AccessRoles not matching.
We wanted to find out with packet capture, it the MuHv2 is tagging the packets and if tagged packets are arriving at the Gateways.

Is there any information or documentation, which part of the packet is used for MuHv2 identity packet tagging ?

In MuHv1, it was Source port numbers - in MuHv2, we heared that's some unsed part of packet header.

KR, Peter

[G_W_Albrecht]

sk164998: Terminal Server Agent v2 (MUH2) - FAQ

[PhoneBoy · Accepted solution]

We use the Identification Header.