topic Re: session end threat in General Topics

session end threat

jdprovine — Wed, 29 Jun 2016 20:10:35 GMT

I had a user that was not able to connect through a mapped drive to one of our servers. Looked in the monitor and it said session end reasson threat but it didn't identify anything about the threat not cve no ID information

Re: session end threat

Raido_Rattameister — Wed, 29 Jun 2016 22:41:23 GMT

Look what the session id is.

Go to threat log and filter out this session id to find the cause.

Traffic log will not tell you the cause.

Re: session end threat

reaper — Thu, 30 Jun 2016 07:37:30 GMT

Have you tried looking in the detailed log view?

if you click the little magnifying glass next to the traffic log, it will open a detailed view. In the detailed view, at the bottom, the correlated logs for this session should also be included (threats, file blocking, ...). If you click one of these correlated logs, the detail view will switch to that log entry

hope this helps ! 🙂

Re: session end threat

Roby_Sreejith — Thu, 30 Jun 2016 10:04:15 GMT

See detailed logs and share the results

Re: session end threat

jdprovine — Thu, 30 Jun 2016 12:57:37 GMT

Yes I also found out that there was a bug involved with one of the threats and had to make an exception