Detects the use of NPS, a port forwarding and intranet penetration proxy server
Read the full analysis on IntelFusions