SSL VPN
Reply
Contributor
Brian
Posts: 35
Registered: ‎01-10-2008
0

"Connection from IP x.x.x.x not authenticated yet"

Hello,

 

Can anyone help me with these messages I keep seeing in my Event log?

 

Thanks,

BB

 

Info AUT20920 2010-02-24 19:13:29 - ive2 - [64.184.0.173] System()[] - Connection from IP 64.184.0.173 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:27 - ive2 - [162.1.2.2] System()[] - Connection from IP 162.1.2.2 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:26 - ive2 - [98.223.184.85] System()[] - Connection from IP 98.223.184.85 not authenticated yet (URL=/dana-na/auth/welcome.cgi?p=forced-off)
Info AUT20920 2010-02-24 19:13:26 - ive2 - [98.223.184.85] System()[] - Connection from IP 98.223.184.85 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:26 - ive2 - [69.5.33.210] System()[] - Connection from IP 69.5.33.210 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:24 - ive1 - [98.223.201.243] System()[] - Connection from IP 98.223.201.243 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:24 - ive1 - [98.223.201.243] System()[] - Connection from IP 98.223.201.243 not authenticated yet (URL=/dana/home/norefr.cgi)
Info AUT20920 2010-02-24 19:13:24 - ive1 - [98.223.201.243] System()[] - Connection from IP 98.223.201.243 not authenticated yet (URL=/dana/jz?con=79420565)

Moderator
zanyterp
Posts: 2,263
Registered: ‎11-19-2007
0

Re: "Connection from IP x.x.x.x not authenticated yet"

Just means an attempt to connect was made. If you would like to not see these, you can disable these connection request items at System>Log/Monitoring>Events>Settings.

Trusted Contributor
stine
Posts: 434
Registered: ‎05-05-2008

Re: "Connection from IP x.x.x.x not authenticated yet"

Brian, I have also seen this error generated by users whose sessions have timed out.  When they click on a bookmark, they get re-directed to the sign-in page and a error gets written to the log because they clicked on a 'valid' link, but were no longer authenticated to use the link.

Theodore E Van Iderstine
Stream Networks
+1 678 373 4200 x125
JNCIA-ER (expired), JNCIA-SSL (ditto)
Contributor
Brian
Posts: 35
Registered: ‎01-10-2008
0

Re: "Connection from IP x.x.x.x not authenticated yet"

Thanks for the info guys. Unchecking "Connection Requests" in the Event Log settings did the trick.

Moderator
zanyterp
Posts: 2,263
Registered: ‎11-19-2007
0

Re: "Connection from IP x.x.x.x not authenticated yet"

You are welcome; glad to here it helped and did what you needed/wanted. :smileyhappy:

Contributor
benc247
Posts: 13
Registered: ‎08-05-2009
0

Re: "Connection from IP x.x.x.x not authenticated yet"

I know this subject is old, but I'm seeing these as well.  Not often, but today I'm getting thousands of these for most users.  Most users I also see this at the end "URL=/dana/js?prot=1&svc=3"

 

Users are connected and seem to be fine.  Does this mean anything?

Moderator
zanyterp
Posts: 2,263
Registered: ‎11-19-2007
0

Re: "Connection from IP x.x.x.x not authenticated yet"

No, it does not mean anything.
Was there a change on your system for access recently?
Contributor
benc247
Posts: 13
Registered: ‎08-05-2009
0

Re: "Connection from IP x.x.x.x not authenticated yet"

No, just getting paranoid I guess.  We had some users drop today and I thought maybe this had something to do with it.  It doesn't.

 

Thanks

Moderator Moderator
Moderator
ruc
Posts: 207
Registered: ‎11-06-2007
0

Re: "Connection from IP x.x.x.x not authenticated yet"

That URL pattern seems to indicate that the connection attempt was from a client component like NC or WSAM. Most probably a result of client component attempting to connect/send data but the session-id being used was timed-out or invalid on the server.

 

As mentioned before this should be of no concern. The only reason this message is logged is for people that want to track if too many unauthenticated requests are being sent to the device.

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.