A part of an identification process to a VPN that is not the login
| Parameter | Value |
|---|
| Subject | vpn |
| Activity | authentication |
| Activity Type | vpn-authentication |
| Pretty Name | Vpn Authentication |
| Success | Fail |
|---|
authentication-successful
| authentication-failed
|
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
| Field | Core | Detection | Informational |
|---|
| auth_type | ✓ | ✓ | |
| domain | | ✓ | |
| mfa_country | | ✓ | |
| domain_user_name | | | |
| mfa_device | | ✓ | |
| user | ✓ | ✓ | |
| Field | Core | Detection | Informational |
|---|
| auth_type | ✓ | ✓ | |
| failure_code | | ✓ | |
| domain | | ✓ | |
| mfa_country | | ✓ | |
| domain_user_name | | | |
| failure_reason | | ✓ | |
| mfa_device | | ✓ | |
| user | ✓ | ✓ | |