cancel
Showing results for 
Search instead for 
Did you mean: 
jont717
Level 12

Web Gateway failing login to Domain Controllers

Our Web Gateway is somehow trying to sign into our Domain Controllers and is being recorded by our ArcSight software.   It is coming up as user name "NONE"

Here is a screen shot.  We have 5 domain controllers in "Windows Domain Memebership" and 5 are active. 

dc.png

This gateway is part of central management configuration.  We never sign into this one either.  We have tried logging into this gateway and failing the login screen on purpose by using different usernames.  When we do that, whatever username we entered comes threw in our reports.  We NEVER use a User Name of NONE.  We have no idea where that it coming from but you can see it hits all of our domain controllers.

Any idea?

0 Kudos