| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Network load balanced 6to4 and Teredo connections | Network load balanced 6to4 and Teredo connections | Microsoft.Forefront.UAG.DirectAccess.Collection.StickyConnections | Microsoft.Forefront.UAG.DirectAccess | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
| User Kerberos Main Mode SAs | User Kerberos Main Mode SAs | Microsoft.Forefront.UAG.DirectAccess.Collection.UserKerbMMSA | Microsoft.Forefront.UAG.DirectAccess | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
| Attempt to sneak authorization data | Attempt to sneak authorization data | Microsoft.Forefront.UAG.Server.Collection.AttemptToSneakAuthorizationData | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 66 | Microsoft Forefront UAG | False | | | True | Application |
| Attempt to sneak negotiate header | Attempt to sneak negotiate header | Microsoft.Forefront.UAG.Server.Collection.AttemptToSneakNegotiateHeader | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 20 | Microsoft Forefront UAG | False | | | True | Application |
| Attempt to sneak source IP data | Attempt to sneak source IP data | Microsoft.Forefront.UAG.Server.Collection.AttemptToSneakSourceIPData | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 19 | Microsoft Forefront UAG | False | | | True | Application |
| Maximum number of concurrent authenticated sessions exceeded | Maximum number of concurrent authenticated sessions exceeded | Microsoft.Forefront.UAG.Server.Collection.AuthenticatedMaxExceeded | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 15 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| Concurrent authenticated sessions threshold reached | Concurrent authenticated sessions threshold reached | Microsoft.Forefront.UAG.Server.Collection.AuthenticatedThresholdExceeded | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 11 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| Configuration change | Configuration change | Microsoft.Forefront.UAG.Server.Collection.ConfigurationChange | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 10 | Microsoft Forefront UAG | False | | | True | Application |
| Connection to Web application failed | Connection to Web application failed | Microsoft.Forefront.UAG.Server.Collection.ConnectionToAppFailed | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 79 | Microsoft Forefront UAG | False | | | True | Application |
| Connection established | Connection established | Microsoft.Forefront.UAG.Server.Collection.EstablishConnection | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 72 | Microsoft Forefront UAG | False | | | True | Application |
| Configuration login failed | Configuration login failed | Microsoft.Forefront.UAG.Server.Collection.FailedAdminLogin | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 8 | Microsoft Forefront UAG | False | | | True | Application |
| Connection to non-Web application failed | Connection to non-Web application failed | Microsoft.Forefront.UAG.Server.Collection.FailedEstablishConnection | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 73 | Microsoft Forefront UAG | False | | | True | Application |
| Unable to start application | Unable to start application | Microsoft.Forefront.UAG.Server.Collection.FailedStartApplication | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 76 | Microsoft Forefront UAG | False | | | True | Application |
| Unable to bind session source IP | Unable to bind session source IP | Microsoft.Forefront.UAG.Server.Collection.FailedToBindSessionSourceIP | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 111 | Microsoft Forefront UAG | False | | | True | Application |
| Unable to retrieve session IP | Unable to retrieve session IP | Microsoft.Forefront.UAG.Server.Collection.FailedToGetSessionIP | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 109 | Microsoft Forefront UAG | False | | | True | Application |
| Unable to read configuration | Unable to read configuration | Microsoft.Forefront.UAG.Server.Collection.FailedToReadConfiguration | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 29 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| Unable to send message | Unable to send message | Microsoft.Forefront.UAG.Server.Collection.FailedToSendMessage | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 25 | Microsoft Forefront UAG | False | | | True | Application |
| Filter shutdown | Filter shutdown | Microsoft.Forefront.UAG.Server.Collection.FilterShutdown | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 69 | Microsoft Forefront UAG | False | | | True | Application |
| Filter startup | Filter startup | Microsoft.Forefront.UAG.Server.Collection.FilterStartup | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 68 | Microsoft Forefront UAG | False | | | True | Application |
| KCD protocol transition failed | KCD protocol transition failed | Microsoft.Forefront.UAG.Server.Collection.KCDProtTransFailed | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 120 | Microsoft Forefront UAG | False | | | True | Application |
| No Web farm servers available | No Web farm servers available | Microsoft.Forefront.UAG.Server.Collection.NoServerAvailable | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 112 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| Invalid request | Invalid request | Microsoft.Forefront.UAG.Server.Collection.ProblematicHeaders | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 33 | Microsoft Forefront UAG | False | | | True | Application |
| Method not defined | Method not defined | Microsoft.Forefront.UAG.Server.Collection.RuleSetMethodNotValid | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 50 | Microsoft Forefront UAG | False | | | True | Application |
| Invalid method | Invalid method | Microsoft.Forefront.UAG.Server.Collection.RuleSetMethodNotValidByRule | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 51 | Microsoft Forefront UAG | False | | | True | Application |
| POST without content-type not allowed | POST without content-type not allowed | Microsoft.Forefront.UAG.Server.Collection.RuleSetPostWoContentType | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 47 | Microsoft Forefront UAG | False | | | True | Application |
| URL path not allowed | URL path not allowed | Microsoft.Forefront.UAG.Server.Collection.RuleSetUnauthorizedURL | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 67 | Microsoft Forefront UAG | False | | | True | Application |
| Service shutdown | Service shutdown | Microsoft.Forefront.UAG.Server.Collection.ServiceShutdown | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 4 | Microsoft Forefront UAG | False | | | True | Application |
| Service startup | Service startup | Microsoft.Forefront.UAG.Server.Collection.ServiceStartUp | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 3 | Microsoft Forefront UAG | False | | | True | Application |
| Session source IP not valid | Session source IP not valid | Microsoft.Forefront.UAG.Server.Collection.SessionSourceIPNotValid | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 110 | Microsoft Forefront UAG | False | | | True | Application |
| Successful configuration login | Successful configuration login | Microsoft.Forefront.UAG.Server.Collection.SuccessfulAdminLogin | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 7 | Microsoft Forefront UAG | False | | | True | Application |
| Unable to retrieve information from LDAP server | Unable to retrieve information from LDAP server | Microsoft.Forefront.UAG.Server.Collection.UnableToRetrieveInformation | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 108 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| Maximum number of concurrent unauthenticated sessions exceeded | Maximum number of concurrent unauthenticated sessions exceeded | Microsoft.Forefront.UAG.Server.Collection.UnauthenticatedMaxExceeded | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 16 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| Concurrent unauthenticated sessions threshold reached | Concurrent unauthenticated sessions threshold reached | Microsoft.Forefront.UAG.Server.Collection.UnauthenticatedThresholdExceeded | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 12 | Microsoft Forefront UAG | True | Warning | High | True | Application |
| URL changed | URL changed | Microsoft.Forefront.UAG.Server.Collection.URLChanged | Microsoft.Forefront.UAG.Server | EventCollection | True | | | 0 | 26 | Microsoft Forefront UAG | False | | | True | Application |