This SonicWALL signature identifies legitimate TDS7 plaintext login traffic using any username, including SA (System Administrator).