This query allows you to see how connections are being made, including things like authentication protocol, connection time, TCP ports
-- Requires VIEW SERVER STATE permission on the server. SELECT session_id, connect_time, --switch the following to GETDATE() for SQL Server 2005 or earlier DATEDIFF(day, connect_time, SYSDATETIME()) AS days_connected, CONVERT(NVARCHAR(50), SYSDATETIME() - connect_time, 8) AS time_connected, net_transport, protocol_type, protocol_version, encrypt_option, -- Is an SSL connection in being used auth_scheme, -- NTLM/KERBEROS = Windows Authentication, SQL = SQL Authentication node_affinity, client_net_address, client_tcp_port, local_net_address, local_tcp_port, -- port instance currently listening on connection_id, parent_connection_id FROM master.sys.dm_exec_connections