Fortigate logs - kerberos srcname
Hello,
I have weird issue where if "device identification" is enabled on interface and Fortigate gets hostname information from kerberos traffic it adds some spaces after the hostname. It can also be seen from 'diagnose user device' command like this:
vd root/0 54:e1:ad:xx:xx:xx gen 390881 req 0
created 7078125s gen 83715 seen 1637670s SW123 gen 15618
ip 192.168.10.123 src arp
os 'Windows' src http id 1444 weight 130
software version '10' src http id 1444 weight 130
host 'PC-TEST123456 ' src kerberos
user 'test.user' src kerberos
It always seems to add spaces so field is 16 characters long.
Is this issue with Fortigate or something with way Windows communicates through kerberos? Haven't been able to figure this out myself.