| Event Id | 20251 |
| Source | RemoteAccess |
| Description | The user: %1 connected on port: %2 on: %3 at: %4 and disconnected on: %5 at: %6. The user was active for: %7 minutes, %8 seconds. %9 bytes were sent and %10 bytes were received. The port speed was: %11. The reason for disconnecting was: %12. |
| Event Information | According to Microsoft : Cause : This event is logged when the user connected on port and disconnected. Resolution : This is a normal condition. No further action is required. |
| Reference Links | Event ID 20251 from RemoteAccess |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.