We recently installed the products and find that all of our users that connect to us via a vpn connection flood the Logon Failures report with entries. We've monitored the connection. As soon as they logon to the vpn a half dozen or so logon failures appear. They generally are remote sales people using domain computers / accounts and are accessing a server setup to share documents with them. Any ideas why this happens?