Home
  •  

Authentication Failures/sec over TCP

Microsoft.LS.2015.Monitoring.UnitMonitor.ThresholdPC.AVEdge.TCP_AUTHENTICATION_FAILURES_SEC (UnitMonitor)

Knowledge Base article:

Summary

The per-second rate of failed attempts to authenticate with the relay over TCP.

Causes

This error occurs when there is unexpectedly high rate of message authentication failures over TCP. This could be the result of a configuration error or an attempt to misuse the A/V Edge Server.

Resolutions

If the A/V Edge Server is deployed in a load balanced array verify that the same authentication certificate is deployed on each machine. Check that the profile of network traffic to the A/V Edge Server is in line with expected usage. A network level trace can be used to determine if there is unusual amount of traffic originating from a single source. If the situation persists then enable tracing to identify the originator of messages failing authentication checks to allow further troubleshooting of the cause.

Element properties:

TargetMicrosoft.LS.2015.Component.AVEdge
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.LS.2015.Performance.Double.ConsecutiveThresholdMonitor
RemotableTrue
AccessibilityPublic
Alert Message
[Skype] The per-second rate of failed attempts to authenticate with the relay over TCP.
Perf Object Name:
Perf Counter Name: {0}
Perf Counter Value: {1}
Error Threshold: 20
Warning Threshold: 10
Consecutive Samples Repeat Count: 2

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.LS.2015.Monitoring.UnitMonitor.ThresholdPC.AVEdge.TCP_AUTHENTICATION_FAILURES_SEC" Accessibility="Public" Enabled="true" Target="Microsoft.LS.2015.Component.AVEdge" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Microsoft.LS.2015.Performance.Double.ConsecutiveThresholdMonitor" ConfirmDelivery="false">

  <Category>PerformanceHealth</Category>

  <AlertSettings AlertMessage="Alert_The_per_second_rate_of_failed_attempts_to_authenticate_with_the_relay_over_TCP.">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/CounterName$</AlertParameter1>

      <AlertParameter2>$Data/Context/SampleValue$</AlertParameter2>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Microsoft.LS.2015.Monitoring.UnitMonitor.ThresholdPC.AVEdge.TCP_AUTHENTICATION_FAILURES_SEC_OverThreshold" MonitorTypeStateID="OverThreshold" HealthState="Error"/>

    <OperationalState ID="Microsoft.LS.2015.Monitoring.UnitMonitor.ThresholdPC.AVEdge.TCP_AUTHENTICATION_FAILURES_SEC_UnderThreshold" MonitorTypeStateID="UnderThreshold" HealthState="Success"/>

    <OperationalState ID="Microsoft.LS.2015.Monitoring.UnitMonitor.ThresholdPC.AVEdge.TCP_AUTHENTICATION_FAILURES_SEC_UnderThresholdOverThreshold" MonitorTypeStateID="UnderThresholdOverThreshold" HealthState="Warning"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <CounterName>A/V Edge - Authentication Failures/sec</CounterName>

    <ObjectName>LS:A/V Edge - TCP Counters</ObjectName>

    <InstanceName/>

    <AllInstances>true</AllInstances>

    <Frequency>60</Frequency>

    <WarningThreshold>10</WarningThreshold>

    <ErrorThreshold>20</ErrorThreshold>

    <NumSamples>2</NumSamples>

  </Configuration>

</UnitMonitor>