locked
I am getting many authentication and autherisation errors on FE's with Event id:14498 RRS feed

  • Question

  • Hi All, From past few month  once in a while we are getting  security events 14498 generated alerts on all front end servers, Our setup have 5front end server in enterprise pool and 3edge servers and a hardware load balancer

    Event details

     

    Multiple authentication or authorization failures occurred on a message for the account and the first attempt was from the IP address x.x.x.x

    CAUSE: A malicious user may be trying to guess the account password in order to break into the network.

    RESOLUTION: Examine the IP address where the attempts originate, and determine whether it should be blocked at the firewall

    The ip x.x.x.x is is assagined hardware load balancer to distribute the load......what action should i take for this issue

    Kindly advice what needs to be done for the following event

    Thanks in Advance

    Monday, January 11, 2010 1:04 PM

Answers