citrix gateway

Expression

product = "citrix gateway"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
http-session	protocol	Default			✓
	dest_host	Default		✓
	result_code	Default			✓
network-session	src_translated_ip	Default			✓
	result	Default			✓
	bytes_out	Default			✓
	bytes_in	Default			✓
	event_name	Default			✓
	dest_translated_port	Default			✓
	src_translated_port	Default			✓
	operation	Default			✓
	dest_translated_ip	Default			✓
process-create	dest_ip	Default		✓
	process_command_line	Default			✓
	user	Default		✓
vpn-authentication	method	Default			✓
	dest_ip	Default		✓
	action	Default			✓
	event_name	Default			✓
	session_id	Default			✓
	dest_host	Default		✓
	src_host	Default		✓
	event_category	Default			✓
	uri	Default			✓
	dest_port	Default			✓
	object	Default			✓
vpn-login	src_translated_ip	Default			✓
	dest_ip	Default		✓
	dest_host	Default		✓
	session_id	Default			✓
	vpn_client_type	Default			✓
	realm	Default			✓
	src_host	Default		✓
	user_agent	Default			✓
vpn-logout	bytes_in			✓
	session_id				✓
	vpn_client_type			✓
	src_host			✓
	source_connection_id				✓
	src_port			✓
	duration			✓
	src_translated_ip			✓
	bytes_out	Legacy		✓
	dest_ip			✓
	event_name			✓
	dest_host	Legacy			✓
	dest_port			✓
vpn-session	src_port			✓
	duration			✓
	src_translated_ip			✓
	bytes_out			✓
	bytes_in			✓
	event_name			✓
	action			✓
	session_id				✓
	access_group			✓
	dest_port			✓
	dest_translated_ip			✓