Showing results for 
Search instead for 
Did you mean: 

What is this email alert: TUI-AD: All AD agents are down for realm Windows?

Level 5
Level 5

I added our IT group e-mail to the Ironport S160 to be alerted when product keys are about to expire.  Our IronPort C160 e-mail filter does this but the S160 did not.


We periodically get this email:


Subject: Critical <System> TUI-AD: All AD agents are down for realm Windows


The Critical message is:

TUI-AD: All AD agents are down for realm Windows

Product: Cisco IronPort S160 Web Security Appliance

Model: S160

Version: 7.5.1-079

Serial Number: (removed for public posting)

Timestamp: 24 Mar 2014 07:20:27 -0400



Any idea what this means?  Everything is working normally.  How can I stop this message?

1 Reply 1

Lee Valentin
Level 1
Level 1

Transparent User Identification. This alert is normally generated when the WSA loses contact with the AD agent. Could be a flap on the network if across a WAN link or could be an issue on the machine where you have the AD agent installed.


The downside is that you will never get a success alert.


I believe worst case scenario is if your policies require user authentication, users may be prompted to authenticate when going to the web.