"Authenticate" action shown in Gateway Network logs

What is the meaning of the “Authenticate” action in the Action column in the Zero Trust Gateway “Network” Activity logs? I have a single user who has successfully connected to the gateway with WARP, but then is unable to remote onto local machines, receiving a 0x4 error code. The gateway log shows “Allow” for most users, but her account is always logged as “Authenticate”

I didn’t see a description for the “Authenticate” action on the following documentation page and I’m not sure what is preventing her from connecting:

Here’s a screenshot of her RDP connection attempts in the Gateway Network log:

1 Like