I am not seeing IDS events for "User_Removed_from_Universal_Grp " in Data Center Security even though I am seeing 4757 event in the Windows logs.
search cancel

I am not seeing IDS events for "User_Removed_from_Universal_Grp " in Data Center Security even though I am seeing 4757 event in the Windows logs.

book

Article ID: 170358

calendar_today

Updated On:

Products

Embedded Security Critical System Protection Critical System Protection Data Center Security Monitoring Edition Data Center Security Server Advanced

Issue/Introduction

Customer is using an older IDS baseline detection policy that is broken and needs to upgrade.

Resolution

Upgrade your IDS baseline detection policy to the latest version will resolve this issue.