Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About JackCheung
JackCheung
New here
Member since Nov 27, 2023
Nov 27 2023
Community Record
3
Posts
0
Kudos
0
Solutions
Nov 27 2023
12:06 PM
Hi. I don't think it is a user attempting to log in with that username. It happens each time I reboot a DC. Also the source workstation in the event message shows as the Meraki MAC address (preceded with an M). And the logon attempt shows as "WORKGROUP" as opposed to our domain name, leading me to think it is coming from the firewall. (BTW it's an MX95, not MX68 as originally posted. Corrected now. Got confused with another MX we've got.) Never considered the Azure/Entra authentication option. Looks like you need to get it enabled via a support ticket. Will do some reading into it though, thanks. However I get the nagging feeling it ought to "just work" as it is.
... View more
Nov 27 2023
10:28 AM
Hi. Yes, they start fine. Is it a timing thing - is the authentication attempt happening too quickly before the server gets fully up to speed?
... View more
Nov 27 2023
10:08 AM
Hi all. First post, sorry if it's been asked. (I did a search but found nothing.) We have MX95 firewalls and Active Directory integration for authenticating our AnyConnect users. We are seeing the occasional login failure from the service account used for LDAP integration. The event on the DC shows: =================================== An account failed to log on. Subject: Security ID: NULL SID Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: NULL SID Account Name: ldap.accountname Account Domain: WORKGROUP Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xC000006D Sub Status: 0xC0000064 =================================== This event shows every time the DC gets rebooted, and occasionally appears randomly too. The event shows once but only once in a blue moon. In other words the password is OK and never changes, it just gets rejected occasionally. Does anyone else get these? Or does anyone know what could be the cause? Thanks.
... View more
Labels:
- Labels:
-
Firewall
© 2024 Cisco Systems, Inc.
