Some users show up in AD Agent's Session tab, but are not authenticated


This article applies to:

  • R3000

Question:

Some users show up in AD Agent's Session tab, but are not authenticated

Reply

In some cases, the AD Agent can fail to properly handle events from the server's security logs.  This can lead to some users showing up in the session tab when they should be logged off, or usernames showing but authentication not taking place on the filter.  Basically, the information on the session tab is no longer sync'ed with what is on the AD server nor the R3000.

In order to re-sync all elements, the simplest solution is to hit the Reset Team State button from the Service tab of the AD Agent Configuration menu.  This will purge all cached data from the sessions tab, rebuild the data, and then send this data to the filter for authentication.
This article was previously published as:
8e6 KB 300200

Last Modified 12/30/2008.
https://support.trustwave.com/kb/KnowledgebaseArticle12617.aspx