Based on an analysis of the process, the AD server will always record an event for pre-authentication required while it is a normal process. You can safely ignore this security event.
However, if you want to disable logging of the pre-authentication events for the admin account that IWSVA uses:
Interscan Web Security Virtual Appliance6.0 , Interscan Web Security Virtual Appliance6.5
When IWSVA registers to LDAP servers for user/group name authentication, the Active Directory server continuously receives Pre-Authentication Failure events in Security event log.
This issue is related to pre-authentication. This is the pre-authentication process:
KRB5KDC_ERR_PREAUTH_REQUIRED.
For the normal Kerberos authentication process, refer to the following:
Based on an analysis of the process, the AD server will always record an event for pre-authentication required while it is a normal process. You can safely ignore this security event.
However, if you want to disable logging of the pre-authentication events for the admin account that IWSVA uses:
