We're seeing alot of these events in our 2311 farm: Connection validation failed on domain '' for user '' for reason 'Deny'. anyone else seen this before?

I was having this earlier in the week, it was Storefront / FA's related. what is your access layer setup?

all our users go through netscaler and logon through saml. I noticed a change made on our fas servers by another admin, so I reverted that last night. He had added a extra Certificate authority to the fas rule

ok! did reverting the change resolve the issue?

So far it looks good, but I had to focus on a P1 issue yesterday, so will have to check on monday