question

AvaRassouli-2495 avatar image
0 Votes"
AvaRassouli-2495 asked AnnaXiu-MSFT commented

NPS MFA extension not working

I am getting this error

NPS Extension for Azure MFA: NPS Extension for Azure MFA only performs Secondary Auth for Radius requests in AccessAccept State. Request received for User ss with response state AccessReject, ignoring request.

and

NPS Extension for Azure MFA: CID: 97caca7d-15c5-42ee-8260-575dd3512b4a :Exception in Authentication Ext for User vpntest :: ErrorCode:: REGISTRY_OPT_ERROR Msg:: Configuration not found for 'TENANT_ID' Enter ERROR_CODE @ https://go.microsoft.com/fwlink/?linkid=846827 for detailed troubleshooting steps.

I made sure I have correct client ID in registry.

Here is another log

<Event><Timestamp data_type="4">04/21/2022 07:33:09.425</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">sstephens</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">60</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\sstephens</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\sstephens</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 1</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:33:09.425</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 1</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\sstephens</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\sstephens</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:34:31.861</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">61</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 2</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:34:31.861</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 2</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:38:00.402</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1293864960</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d1ed00062616c48</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 3</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:38:00.402</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 3</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:38:15.518</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1293869056</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d1ee00062616c57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 4</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 07:38:15.518</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 4</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:01:28.270</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">sstephens</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">63</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\sstephens</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\sstephens</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 5</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:01:28.270</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 5</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\sstephens</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\sstephens</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:19:20.763</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">65</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 6</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:19:20.763</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 6</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:47:44.249</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295028224</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d30900062617c9f</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 7</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:47:44.249</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 7</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:47:59.883</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295040512</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d30c00062617caf</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 8</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:47:59.883</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 8</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:54:37.443</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295134720</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d32300062617e3c</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 9</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 08:54:37.443</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 9</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:02:46.723</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295306752</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d34d00062618026</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 10</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:02:46.723</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 10</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:02:57.629</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295314944</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d34f00062618031</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 11</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:02:57.629</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 11</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:26:56.617</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295527936</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d383000626185cf</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 12</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:26:56.617</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 12</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:27:01.121</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295532032</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d384000626185d4</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 13</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:27:01.121</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 13</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:31:12.492</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295568896</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d38d000626186cf</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 14</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:31:12.492</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 14</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:31:16.437</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295572992</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d38e000626186d3</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 15</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:31:16.437</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 15</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:34:35.736</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295626240</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d39b0006261879b</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 16</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:34:35.736</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 16</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Provider-Type data_type="0">1</Provider-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:35:59.353</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">66</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 17</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:35:59.353</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 17</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:40:24.036</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295716352</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d3b1000626188f7</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 18</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:40:24.036</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 18</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:53:16.731</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-Port data_type="0">1295826944</NAS-Port><Called-Station-Id data_type="1">199.88.65.246</Called-Station-Id><Calling-Station-Id data_type="1">76.103.108.57</Calling-Station-Id><NAS-Port-Type data_type="0">5</NAS-Port-Type><Tunnel-Client-Endpt data_type="1">76.103.108.57</Tunnel-Client-Endpt><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><Vendor-Specific data_type="2">00000C04920B5465737447726F7570</Vendor-Specific><Vendor-Specific data_type="2">00000C04960600000002</Vendor-Specific><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform=win</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-platform-version=10.0.19043 </Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-public-mac=08-d4-0c-5a-35-93</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-type=Dell Inc. Inspiron 11-3157</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=ac-user-agent=AnyConnect Windows 4.9.06037</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid-global=4948644F3F13AE00628B00484A44BD4EAFDF4BAE</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">mdm-tlv=device-uid=93FD2D7C64075630897C076BA9908C40B8A78A0279F7EE41D04CB29517F856E1</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">audit-session-id=0a649e5c4d3cc00062618bfc</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">ip:source-ip=76.103.108.57</Cisco-AV-Pair><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 19</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 09:53:16.731</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 19</Class><Authentication-Type data_type="0">8</Authentication-Type><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 10:07:16.234</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">sstephens</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">69</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\sstephens</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\sstephens</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 20</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 10:07:16.234</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 20</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\sstephens</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\sstephens</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 10:48:20.783</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">72</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 21</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 10:48:20.783</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 03:40:49 21</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 11:52:48.476</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><User-Name data_type="1">ss</User-Name><NAS-IP-Address data_type="3">10.100.250.177</NAS-IP-Address><NAS-Port data_type="0">91</NAS-Port><NAS-Port-Type data_type="0">5</NAS-Port-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Authentication-Type data_type="0">8</Authentication-Type><Cisco-AV-Pair data_type="1">coa-push=true</Cisco-AV-Pair><Class data_type="1">311 1 10.100.105.46 04/21/2022 17:56:38 115</Class><Packet-Type data_type="0">1</Packet-Type><Reason-Code data_type="0">0</Reason-Code></Event>
<Event><Timestamp data_type="4">04/21/2022 11:52:48.476</Timestamp><Computer-Name data_type="1">NPSVPN</Computer-Name><Event-Source data_type="1">IAS</Event-Source><Class data_type="1">311 1 10.100.105.46 04/21/2022 17:56:38 115</Class><Authentication-Type data_type="0">8</Authentication-Type><Client-IP-Address data_type="3">10.100.250.177</Client-IP-Address><Client-Vendor data_type="0">0</Client-Vendor><Client-Friendly-Name data_type="1">ProtestVPN</Client-Friendly-Name><Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name><Provider-Type data_type="0">1</Provider-Type><SAM-Account-Name data_type="1">ADMIN\ss</SAM-Account-Name><Fully-Qualifed-User-Name data_type="1">ADMIN\ss</Fully-Qualifed-User-Name><Packet-Type data_type="0">3</Packet-Type><Reason-Code data_type="0">21</Reason-Code></Event>

azure-ad-multi-factor-authentication
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi. As issues with tag “vs-testing” focus on testing questions in Visual Studio, your issue is more related to Azure Active Directory Multi factor Authentication. So I changed the “vs-testing” tag to “azure-ad-multi-factor-authentication” tag. Thanks for your understanding.

0 Votes 0 ·

0 Answers