Riverbed Exam 810-01 Topic 1 Question 22 Discussion

The optional user identity feature relies on data obtained from the security event log of one of more Microsoft Active Directory domain controllers. This data can be sent directly to the appliance or it can be read by a Windows intermediary host that sends it to the appliance. The appliance interprets this data to track successful and failed login attempts by domain users on hosts within the domain. It associates this user identity information with host information to produce reports that identify users as well as hosts.