High ARP cache usage for Palo Alto Networks

Vendor

Palo Alto Networks

Description

Indeni will alert when the number of ARP entries stored by a device is nearing the allowed limit.

Remediation Steps

Identify the cause of the large ARP table. If it is due to a legitimate cause, such as a high number of hosts visible on the available networks, please contact your technical support provider.

How does this work?

This alert uses the Palo Alto Networks API to retrieve the current utilization of the ARP cache - number of entries in it vs the total limit.

Why is this important?

This alert uses the Palo Alto Networks API to retrieve the current utilization of the ARP cache - number of entries in it vs the total limit.

Without Indeni how would you find this?

An administrator could write a script to leverage the Palo Alto Networks API to collect this data periodically and alert appropriately. Alternatively, wait for an issue to occur and check the ARP cache status by running "show arp all".


View Source Code