Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1035 Source: MSExchangeTransport

Level
Description
Inbound authentication failed with error <error> for Receive connector <connector>. The authentication mechanism is <mechanism>. The source IP address of the client who tried to authenticate to Microsoft Exchange is <IP address>.
Comments
 
This issue occurs if the Exchange server cannot authenticate with the remote Exchange server. There are many potential reasons for the authentication failure. Since it is based on Kerberos, problems such as clocks out of sync or firewalls blocking Kerberos traffic can create this situation. ME979174 provides some more details about troubleshooting this problem.
As per Microsoft: "This error event indicates that the inbound authentication from the specified source on the specified Receive connector has failed. The authentication error and the authentication mechanism are specified in the text of the error message.
To resolve this error, verify that the Receive connector and the remote client are configured to use a common authentication method with the correct credentials and required certificates". See MSEX2K3DB for additional information.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...