AAA Authentication Errors

An application had an unusual increase in response errors for the authentication, authorization, and accounting (AAA) protocol. This detection indicates that users might be prevented from logging into their service.

AAA is a security framework for Authentication, Authorization, and Accounting, managing network access and enforcing security policies. AAA includes application-level network access protocols such as RADIUS, Diameter, TACACS, and TACACS+. A spike in AAA response errors indicates recently expired user passwords, expired share secrets, misconfigured service accounts, or widespread incorrect password entries. Errors such as Access-Reject are often attributed to shared secrets between the AAA server and client that have become corrupted or modified.