Sorry in advance if this is not the correct thread to post in.
We are currently migrating over to Auvik from Solarwinds NCM and running into a bit of an issue. We have one AD account that is being used as CLI creds for all of our switches and routers. We have a separate account for just our ASA's. Both of these accounts are identical and have been configured through our Network Policy Server to utilize privilege level 3. The account used for the ASA's is locking out about once a day and I cannot figure out why it is locking it. I can see through our SIEM that it is authenticating all day with our ASA's and running commands to view the config. When it does get locked out, our SIEM is indicating that it is locked out due to a bad password, but that doesn't make sense as is able to authenticate throughout the day just fine. I even limited the account to log into only one ASA, and it still locks out after a few hours. I am also able to authenticate via putty multiple times successfully without any lockouts. I also tried changing the priv level to 15, but that still didn't fix the issue.
Does anyone have any ideas as to why this might be happening? Auvik bug?
Thank you for the response and suggested tip. Unfortunately, this account is brand new and doesn't exist anywhere else. When I run that script, the caller computer name is blank. Do you know how to enable additional authentication logging for an ASA? I am wondering if I will see anything useful there.
Community Live Event Video
Are you ready to level up your security? Learn more about how Cisco SecureX can help you simplify your security and maximize operational efficiency.
This event talks about Cisco SecureX, its benefits, features, and usage. Th...
Hi all,I cannot understand why is something working very well they create a way to complicate things in Cisco ASA OS. I have a rule :object network LOCAL_ADRESS1 host 192.168.20.12 nat (VLAN20,outside) source static LOCAL_ADRESS1 interface&...
It is our pleasure to officially announce the finalists in the 2021 IT Blog Awards. We are now looking to our amazing tech community to check out the amazing line up of bloggers, vloggers and podcasters. Make sure to vote for your favorites...
Community Live Event Slides
This event talks about Cisco SecureX, its benefits, features, and usage. The session includes sample use cases and live demonstrations.
Cisco expert Luis Silva talks about how this solution can integrate Cisco technology and ...
Hello All, Recently I got an opportunity to perform POC with Cisco ISE (2.7 Patch 4) and Aruba Wireless AP (IAP) to perform 802.1x EAP-FAST (machine + user) authentication followed by Posture Assessment on Windows 10 Machines (installed with AnyConnect 4....