| The firewall checks to determine if the
username a user submits to a restricted site maps to the IP address of
the login username. To do this, the firewall matches the IP
address of the login username and the username submitted to a web
site to its IP address-to-user mapping table to detect when users
submit their corporate usernames to sites in a restricted category. Because
this method matches the IP address of the login username associated
with the session against the IP address-to-username mapping table,
it is an effective method for detecting corporate username submissions,
but it does not detect corporate password submission. If you want
to detect corporate username and password submission, you must use
the Domain Credential Filter method. | 
