user/guid mapping in RSA Web Threat Detection
Originally Published: 2015-08-25
Article Number
Applies To
RSA Product/Service Type: Forencics
RSA Version/Condition: All
Resolution
A guid must be present in the web session traffic. The guid must be unique and present throughout the session, it can change within the session and such changes can be followed by a guidFollower (see below)
guid is defined as an attribute containing the GUID which will be read from the txn.
next-guid is an attribute to hold the next GUID when it changes during a session, read from the txn
guidOut is an attribute to hold the GUID which will be written into the txn.
next-guid is an attribute to hold the next GUID when it changes during a session, read from the txn
guidOut is an attribute to hold the GUID which will be written into the txn.
prevGuidOut is an attribute to hold the previous GUID (in a GUID following sense) which will be written into the txn.
user-from-login is an attribute which (in this example) hold the user id read from the transaction.
Silver Surfer is responsible for the user mapping and must be configured with the above attributes in it mapping section where it needs the relation of the above attributes to be defined along with the guidFollower
The login section defines where and when to find the user id in the session, this is usually only found at login for example.
guidFollower - Defines a relationship between two attributes containing GUID values, in which one represents the current value and the other represents the next value. Uses guid and next-guid (above)
Related Articles
BlogIn - SAML Relying Party Configuration - RSA Ready Implementation Guide Number of Views RSA Prime Components Number of Views Operators for Using LDAP Attributes in Access Policies Number of Views About the Distribution Key and Password Generation Method in SecurID Software Token (SoftID) Number of Views RSA Prime Support Model Number of Views
Trending Articles
Authentication Manager Log Messages (23001-23091) RSA Authentication Manager Upgrade Process How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Authentication Manager 8.9 Release Notes (January 2026)
Don't see what you're looking for?
