"Connection from IP x.x.x.x not authenticated yet"

[Brian_]

Hello,

Can anyone help me with these messages I keep seeing in my Event log?

Thanks,

BB

Info AUT20920 2010-02-24 19:13:29 - ive2 - [64.184.0.173] System()[] - Connection from IP 64.184.0.173 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:27 - ive2 - [162.1.2.2] System()[] - Connection from IP 162.1.2.2 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:26 - ive2 - [98.223.184.85] System()[] - Connection from IP 98.223.184.85 not authenticated yet (URL=/dana-na/auth/welcome.cgi?p=forced-off)
Info AUT20920 2010-02-24 19:13:26 - ive2 - [98.223.184.85] System()[] - Connection from IP 98.223.184.85 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:26 - ive2 - [69.5.33.210] System()[] - Connection from IP 69.5.33.210 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:24 - ive1 - [98.223.201.243] System()[] - Connection from IP 98.223.201.243 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:24 - ive1 - [98.223.201.243] System()[] - Connection from IP 98.223.201.243 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:24 - ive1 - [98.223.201.243] System()[] - Connection from IP 98.223.201.243 not authenticated yet (URL=/dana/jz?con=79420565)

[zanyterp_]

Just means an attempt to connect was made. If you would like to not see these, you can disable these connection request items at System>Log/Monitoring>Events>Settings.

[stine_]

Brian, I have also seen this error generated by users whose sessions have timed out. When they click on a bookmark, they get re-directed to the sign-in page and a error gets written to the log because they clicked on a 'valid' link, but were no longer authenticated to use the link.

[Brian_]

Thanks for the info guys. Unchecking "Connection Requests" in the Event Log settings did the trick.

[zanyterp_]

You are welcome; glad to here it helped and did what you needed/wanted.

[benc247_]

I know this subject is old, but I'm seeing these as well.  Not often, but today I'm getting thousands of these for most users.  Most users I also see this at the end "URL=/dana/js?prot=1&svc=3"

Users are connected and seem to be fine.  Does this mean anything?

[zanyterp_]

No, it does not mean anything.
Was there a change on your system for access recently?

[benc247_]

No, just getting paranoid I guess.  We had some users drop today and I thought maybe this had something to do with it.  It doesn't.

Thanks

[ruc_]

That URL pattern seems to indicate that the connection attempt was from a client component like NC or WSAM. Most probably a result of client component attempting to connect/send data but the session-id being used was timed-out or invalid on the server.

As mentioned before this should be of no concern. The only reason this message is logged is for people that want to track if too many unauthenticated requests are being sent to the device.

[oudic]

hey stine,

I experienced this problem
Is there any solution ?



Cluster: IVECluster
Hostname: IVENode1
Model: PSA-3000
Uptime: 65 days, 18 hours, 4 minutes, 4 seconds
Current version: 8.1R8 (build 43849)
Rollback version: 8.1R4.1 (build 37683)