‎2020-12-16
11:50 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
is there a report or log that can be viewed that shows when a user enters their PIN to receive their on-demand token?
We are having issue where people are not receiving their on-demand token after entering their PIN. We are trying to prove that the issue is with our mail delivery system and not with the RSA. Is there somewhere on the RSA console where i can view logs that show PIN activity?
- Tags:
- Authenticator
- Authenticators
- Community Thread
- Discussion
- Forum Thread
- RSA SecurID
- RSA SecurID Access
- SecurID
- Token
- Token Auth
- Token Authentication
- Token Authenticator
- Token Authenticators
2 Replies
‎2020-12-17
02:01 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can simply take a tcpdump using the authentication manager CLI matching the SMS gateway IP address as the host to filter on.
‎2020-12-17
05:49 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If not sure of SMS gateway IP address, or proxies or load balancers are involved, filter the TCP dump on TCP port 25. Write it to a file to go through it with WireShark
am81p:~ # cd /usr/sbin
am81p:/usr/sbin # ./tcpdump -i eth0 -s 1514 -Z root port 25 -w /tmp/smtp_<server_name>.pcap
