# The "Dst User DN" field in the log details section is not masked

## Product
Security Management, Smart-1 Cloud

## Version
R80.40 (EOS), R81 (EOS), R81.10 (EOS), R81.20

## Last Modified
2024-07-01

## Symptoms

- The "DST User Dn" field is not masked in the log details, whereas the "Src User Dn" field is masked.
- This command does not return an output:

```
# grep "dst_user_dn" /var/log/opt/CPrt-<Version>/conf/fieldsConfig.xml
```

For example:

```
# grep "dst_user_dn" /var/log/opt/CPrt-R81.10/conf/fieldsConfig.xml
```

## Cause

The file _fieldsConfig.xml._ is missing the string:

```
{ "<field name=\"dst_user_dn\" type=\"string\" indexed=\"false\" stored=\"false\" tag=\"identity\" />" }
```

## Solution

This problem was fixed. The fix is included in:

- [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 70
- [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 152
- [Jumbo Hotfix Accumulator for R81](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81/Default.htm) starting from Take 99
- [Jumbo Hotfix Accumulator for R80.40](https://sc1.checkpoint.com/documents/Jumbo_HFA/R80.40/Default.htm) starting from Take 211

If you choose not to upgrade, Check Point can supply a **Hotfix**. [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**

Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

- If you choose not to install the hotfix, you can do a manual workaround.

**Important note:** You must run this procedure during a maintenance window, as it includes restart of the Check Point services.

**Procedure**  
1. Close all sessions of the SmartConsole.
2. Connect to the SSH of the Log Server.
3. Backup the existing _fieldsConfig.xml_ file:

```
    # cp /var/log/opt/CPrt-<Your version>/conf/fieldsConfig.xml /var/log/opt/CPrt-R81.10/conf/fieldsConfig.xml.backup
    ```

For Example:

```
    # cp /var/log/opt/CPrt-R81.10/conf/fieldsConfig.xml /var/log/opt/CPrt-R81.10/conf/fieldsConfig.xml.backup
    ```

4. Edit the file "fieldsConfig.xml":

```
    # vi /var/log/opt/CPrt-<Your version>/conf/fieldsConfig.xml
    ```

For example:

```
    # vi /var/log/opt/CPrt-R81.10/conf/fieldsConfig.xml
    ```

5. Below the `"<fields>"` section, add this line:

```
    <field name="dst_user_dn" type="string" indexed="false" stored="false" tag="identity" />
    ```

6. Save and close the file.
7. Restart Check Point Services:

```
    # cpstop;cpstart
    ```

#### NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

## Article Properties

- **Access Level**: General  
- **Status**: Approved by TAC  
- **Date Created**: 2024-05-05  
- **Last Modified**: 2024-07-01