Firmware Installed : 17.1.0-GA
STAS: 2.2.2.0
Symptoms : XG Firewall successfully configured for authentication for AD , remote users works fine and gets logged under "Remote Users" however Active Directory users are not logged.
Stas.log generates the following :
ERROR [0xe44] 27/06/2018 09:59:00 : wrkstpoll_workerthread_wmi: could not connect to WMI Namespace '\\10.x.x.x\root\cimv2': 0x800706ba
DEBUG [0xe44] 27/06/2018 09:59:01 : wrkstpoll_workerthread_wmi: connecting to WMI Namespace '\\10.x.x.x\root\cimv2'
MSG [0xe44] 27/06/2018 09:59:01 : wrkstpoll_workerthread_wmi: username:DOMAIN\user
ERROR [0xe44] 27/06/2018 09:59:05 : wrkstpoll_workerthread_wmi: could not connect to WMI Namespace '\\10.x.x.x\root\cimv2': 0x800706ba
ERROR [0xe44] 27/06/2018 09:59:05 : wrkstpoll_workerthread_wmi: WMI Namespace Connect Retry Exceeded for '\\10.x.x.x\root\cimv2'
Anyone having this problem?
Hi,
This Code is a "windows/WMI" error code.
Please check, if the DC can connect to each Workstation via WMI.
Could be a network issue, or something else on the workstation itself.
Here are the commands for the STAS / DC CMD.
https://community.sophos.com/kb/en-us/123020#Step%203:%20Verify%20WMI%20using%20command%20line
__________________________________________________________________________________________________________________
Thank you! This has helped , enabling WMI logoff detection and push it through GPO
Henry Jesus Lastimosa, Jr.
IT Security Administrator
henry.lastimosa@janty.com