Because I work also with Palo Alto and domain logged computers they use the WMI or the WINRM protocol to do seamless ip to username mapping by probing client systems and monitoring Microsoft Exchange servers and domain controllers for user mapping information, I will ask if is this suppprted for SWG or APM as I couldn't find any documentation?
I think maybe it is not and something like NTLM or Kerberos will be needed for computers already logged into the domain but I will still ask if someone knows anything about this. Also for the SWG F5 DC Agent it seems to use Netbios not WMI to check the Microsoft AD server for ip mapping to user id resolution?
