I'm observing thousands of error messages on the firewall, related to the following:
Log comp: "Firewall Authentication"
Auth Client: "Heartbeat"
Auth mechanism: "Local, AD, AD, AD"
Message: "User username failed to login to Firewall through Local,AD,AD,AD authentication mechanism from xxx.xxx.xxx.xxx because of wrong credentials"
Other authentication, with auth client "CTA", are working correcly:
Log comp: "Firewall Authentication"
Auth Client: "CTA"
Auth mechanism: "AD"
Message: "User username username@domain.local of group XXXXX logged in successfully to Firewall through AD authentication mechanism from XXX.XXX.XXX.XXX"
The user is reported with @domain.local
Quote