zyxel and sso

LeviPonti
LeviPonti Posts: 34  Freshman Member
First Comment Fourth Anniversary
edited April 2021 in Security
Hi,
 i have a problem with a subnet in my LAN:
I use SSO installed in my AD and it works correctly in all subnets except one. The subnet is 192.168.21.X and the message of log SSO is:

[2021/04/02 10:22:13 AM] [Client] [WARN] Failed to query client: 192.168.21.4, Error code = 103.
[2021/04/02 10:22:13 AM] [Operation] [DEBUG] Push logout event of [provadoc][ITISLEVI][192.168.21.4] to queue.
[2021/04/02 10:22:13 AM] [DC] [INFO] provadoc@ITISLEVI, IP:192.168.21.4 logoff successfully from DC: ITISLEVI.
2021/04/02 10:22:13 AM] [Gateway] [INFO] Succeed in connecting to Gateway(192.168.1.77).
[2021/04/02 10:22:13 AM] [Gateway] [INFO] Succeed in sending information of provadoc(192.168.21.4) to Gateway(192.168.1.77).

My zyxel is 192.168.1.77

if i logout from client and relog returns to work correctly.

Can anyone help me ?

All Replies

  • LeviPonti
    LeviPonti Posts: 34  Freshman Member
    First Comment Fourth Anniversary
    Hi,
    now the problem has spread to other subnet; randomly some pc not all.
    if i logout from client and relog returns to work correctly.

    Can anyone help me ?
  • Podo
    Podo Posts: 28  Freshman Member
    When this happen do you see that the user in the SSO agent's logon user list and the login user in usg's web gui?
  • LeviPonti
    LeviPonti Posts: 34  Freshman Member
    First Comment Fourth Anniversary 
    The user is in the sso agent's logon user list but not in usg's web gui.
  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    25 Answers First Comment Friend Collector

    Hi @LeviPonti,

     

    Please share some information with us:

     

    1- Which subnets are affected by this symptom?

    2- What is your Windows Server's version?

    3- Does this symptom occurs for every users randomly in the subnet 192.168.21.X or it occurs especially to specific users (hosts)? 

    4- Please share your current config file with me by private message. And if this is always seeable, please help to collect the packets during the negotiation and send me by private message.


  • LeviPonti
    LeviPonti Posts: 34  Freshman Member
    First Comment Fourth Anniversary
    1- (192.168.21.X, 192.168.13.X, 192.168.8.X, 192.168.4.X,192.168.14.X)
    2-Windows server 2019 standard
    3-symptoms occurs for random users
    4-    where can i find the packets?
  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    25 Answers First Comment Friend Collector

    Hi @LeviPonti,


    Please login to your USG210’s Web GUI, navigate to Maintenance > Diagnostics > Packet Capture menu, choose the interfaces you want to capture packets.

    If this symptom easy to reproduce, choose the interfaces then please first click on the Capture button, reproduce the issue, click on the stop button.


    After capturing is done, please find the files in Maintenance > Diagnostics > Packet Capture > files menu and provide me by private message.
  • LeviPonti
    LeviPonti Posts: 34  Freshman Member
    First Comment Fourth Anniversary 
    It is not easy to reproduce the fault but I will try shortly.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）