Sophos Central Endpoint and SEC: Computers fail/hang on boot after the Microsoft Windows April 9, 2019 update. Please follow knowledge base article 133945
Learn about the Benefits of Multi-Factor Authentication (MFA). Turn your MFA on now!
We'd love to hear about it! Click here to go to the product suggestion community
In daily reports I find Firewall Authentication Notices for users. I noticed it happening when my own user account was on the report during an hour when I was not working (asleep even!). I realized that the majority of my own logs for this occurred on a PC which I had locked, but not logged off. I found logs for my daily PC which I lock, but it goes to sleep after some time.
After some more digging, I found that some authentication failures are happening while I'm logged on to the PC and using it, but not making any active attempts through the firewall (I'm sure some background objects are though?). This doesn't appear to be causing any problems, just a build up of logs.
Which Authentication method do you use?
Can you share some detail screenshots of log viewer?
In reply to LuCar Toni:
In reply to Justin McMahan:
You are using Synchronized User ID (heartbeat) as a authentication method.
Can you post a live user tab of XG?