topic Re: Identity Awareness Failed Login Log generated on certain day and time in Firewall and Security Management

Identity Awareness Failed Login Log generated on certain day and time

KeonNg — Thu, 24 Apr 2025 08:54:48 GMT

Hi All,

Currently our Check Point having a weird issue. We found that on certain day specific time frame we will see a lot of user failed login logs based on the SmartConsole Logs. The smartconsole showing that the error description with "An error was detected while trying to authenticate against the AD server. It may be a problem of bad configuration or connectivity. Please refer to the troubleshooting guide for more help". We have checked all the settings we have no idea which one is not correct. From user perspective they are not experienced any login issue or connection issue, im not sure whether it because it recovers speedy without user awareness.

We have checked there's no any CPU & memory spike during the time. It only happened around 5 minutes the logs keep spamming and with random users.

Has anyone known why we seeing this failed login log is spamming during the certain time? How to avoid this logs generated?

Best Regards,

Re: Identity Awareness Failed Login Log generated on certain day and time

KeonNg — Thu, 24 Apr 2025 08:56:45 GMT

Re: Identity Awareness Failed Login Log generated on certain day and time

PhoneBoy — Fri, 25 Apr 2025 13:03:53 GMT

If it happens only at a specific time, it suggests a temporary connectivity issue between your Identity Collector and your Active Directory services.

Re: Identity Awareness Failed Login Log generated on certain day and time

KeonNg — Mon, 05 May 2025 08:04:37 GMT

Hi @PhoneBoy

How do we verify the Identity Collector having connectivity issue with the AD as we never see any connection failure during the time in the IDC when the failed login logs generated?

Re: Identity Awareness Failed Login Log generated on certain day and time

PhoneBoy — Mon, 05 May 2025 21:00:35 GMT

Your best bet is to open a TAC case.