cancel
Showing results for 
Search instead for 
Did you mean: 
hon
Not applicable
Report Inappropriate Content
Message 1 of 4

domain value in mwg policy

Could someone suggest me for this. I waana get the domain arrtibute inthe mwg policy. what policy artibute that i have to use. for example i want to allow client authen with full user " domain\user"

and want to user domain\user in mwg rule. can i do that caz mwg only see the user not domain

3 Replies
eelsasser
Not applicable
Report Inappropriate Content
Message 2 of 4

Re: domain value in mwg policy

Add a rule like this right after your authentication rule.

Name:
Prepend Realm\ to Username


Comment:
Puts the domain name in front of the user name


Rule Criteria:
Authentication.IsAuthenticated equals true AND
Authentication.Realm does not equal ""


Action:
Continue


Events:
Set Authentication.UserName = Authentication.Realm
+ "\"
+ Authentication.UserName

This will put domain into the logs:

Capture.png

It can also be used for rules like:

Authentication.UserName is in list Exception #1: Users or Groups

Capture1.png

hon
Not applicable
Report Inappropriate Content
Message 3 of 4

Re: domain value in mwg policy

dear eelsasser,

Your policy help me a lot thank for that but do you have problem with web reporter caz after i use this rule web reporter cannot parse the log .

eelsasser
Not applicable
Report Inappropriate Content
Message 4 of 4

Re: domain value in mwg policy

I'd have to see the entire log definition. There is probably a missing quote or the column headers have become mis-aligned.

The log should definitely import if the field is in the identical place.

McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.