what are.. "Authorization Failures" ? (Full Version)

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting


penrose.l@2college.nl -> what are.. "Authorization Failures" ? (16.Feb.2005 4:10:00 PM)

Authorization Failures
The following chart summarizes the users who had the highest number of authorization failures during the report period. Users that have generated the most authorization failures are listed first.

it's still a mystery for me. What are these errors meaning in a report job..?
Is it faulty firewall clients ? I can't find anything anywhere and noone here has any problems with their connections even if some ppl have 10000 Authorization Failures per day...

Very strange I would appreciate any info on this.

Lex Penrose

jparnell -> RE: what are.. "Authorization Failures" ? (18.Mar.2005 10:04:00 AM)

Good question, I have noticed these in my reports too, but none of the users are complaining. Does anyone have any idea what they mean?

awj -> RE: what are.. "Authorization Failures" ? (18.Mar.2005 2:53:00 PM)

Do you have any rules for specific users or groups such as authenticated users?

If you do and they are using the Web proxy client (Internet Explorer pointing to your ISA server) then an initial attempt is made anonymously (and fails) then it supplies the user details and should work if the rule allows the connection. I think the failed attempts you see in your logs are from the first anonymous attempt.

Page: [1]