Kerberos authentication success log on Prisma Access Explicit Proxy is not generated in Log Viewer > Firewall/Authentication

• The documentation Kerberos authentication -(STEP 6) explains that we can see the authentication success logs for undecrypted traffic.
• However, even for the undecrypted traffic, the Kerberos authentication success logs are not generated in Log Viewer > Firewall/Authentication.

• The authenticated username by Kerberos is seen in the traffic  logs under the Source User field as below.

• Prisma Access
• Explicit Proxy
• Kerberos Authentication

• This is an expected behavior.
• The authentication log is not generated for Kerberos for the normal successful cases.

Check the authenticated user name in the traffic log under the Source User field.