Skip to main content

Join us at Gartner SEC London and discover how LevelBlue can help you secure what’s next. Learn More

Loading...
Loading...

INFO: Some users show up in AD Agent's Session tab, but are not authenticated

Expand / Collapse


This article applies to:

  • R3000

Question:

Some users show up in AD Agent's Session tab, but are not authenticated

Reply

In some cases, the AD Agent can fail to properly handle events from the server's security logs.  This can lead to some users showing up in the session tab when they should be logged off, or usernames showing but authentication not taking place on the filter.  Basically, the information on the session tab is no longer sync'ed with what is on the AD server nor the R3000.

In order to re-sync all elements, the simplest solution is to hit the Reset Team State button from the Service tab of the AD Agent Configuration menu.  This will purge all cached data from the sessions tab, rebuild the data, and then send this data to the filter for authentication.
This article was previously published as:
8e6 KB 300200

To contact LevelBlue about this article or to request support:


Rate this Article:
     
Tags:

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.