Manual Creation of Log Rules Is So 1999
May 28, 2015 in Solarwinds, Technical
SolarWinds just came out with a contest called Rule Your Log Data. In this contest, they are encouraging the community to build rules using their… Read More
Latest Article
Firewall Connection Table Limit Approaching or Reached – Check Point Firewall Alerts
This is a real life sample alert from the indeni Check Point Firewall configuration guide. Description: There are 248742 concurrent connections while the limit is… Read More
Subscribe and Stay Current
indeni is Short-Listed for the 2015 Red Herring Top 100 North America Award
San Mateo, CA – May 18th, 2015 – indeni announced today it has been short-listed for Red Herring’s Top 100 North America award, a prestigious… Read More
Cutting Down On Alerting Noise: Response to SolarWinds
Recently a member of the support team at SolarWinds posted “Cutting Down On Alerting Noise: Guest Post From Support”. The challenge of alert fatigue and… Read More
Pulling Data via SNMP, SSH or API – PAN Firewall Best Practices
When querying a firewall, what’s the best protocol to use? SNMP, SSH or API? If you are looking to integrate Palo Alto firewalls as part… Read More
F5 IPSec Tunnel Causing Traffic Issues
This is a real life sample alert from indeni for F5 Load Balancing Methods Description: Some of the F5 IPsec tunnels have multiple security associations… Read More
Palo Alto Networks Proxy Session Pool Low
This is a real life sample alert from our indeni alert guide for Palo Alto Networks Firewall. Description: The Proxy Session pool is low – of… Read More
Comparing Check Point’s SmartEvent and SmartReporter vs indeni
Check Point’s SmartEvent and SmartReporter blades have made quite some progress over the last two years. The database used for collecting log data has been… Read More
Gartner’s Magic Quadrant Enterprise Firewall Comparison
DISCLAIMER: indeni has no specific bias towards one manufacturer or the other, but please keep in mind indeni currently supports firewalls made by Cisco, Check… Read More
F5 SIP might have issues in the current software version
This is a real life sample alert from indeni Description: indeni has determined that SIP profile is being used with 11.1.0 on this device. Manual… Read More
High Memory Usage: FWM Process – Check Point Firewall Alerts
This is a real life sample alert from the indeni Check Point Firewall guide to alerts. Alert Description: The memory usage in the operating system… Read More
Gold Standard Configuration for Network Devices
Network and security teams in large enterprises spend quite a bit of time defining their “Gold Standard Configuration” for network devices – a checklist… Read More
Palo Alto Networks FQDN Resolution Failures
This is a real life sample alert from indeni from our Palo Alto Networks Firewall Alert Guide Description: There are certain FQDN’s set but the… Read More
Tuesday And Wednesday Are The Busiest For NetOps/SecOps Teams
Network operations and security operations teams generally work around the clock. However, there are days and times they are clearly busier. Below is a graph… Read More
F5 SNAT port exhaustion occurring
This is a real life sample alert from indeni Description: You are encountering SNAT port exahustion. The logs from /var/log/ltm are: 01010201:2: Inet port exhaustion… Read More
Jobs Failed Palo Alto Networks Alert Guide
This is a real life sample alert from indeni from our Palo Alto Networks Firewall Alert Guide. Description: Some jobs have failed on the device, please… Read More
Check Point firewalls Alert of the Week: Two cluster members differ in their SecureXL configuration
This is a real life sample alert from indeni. Description: This cluster member has SecureXL disabled. This does not match the SecureXL configuration of other… Read More
The Rise of the VAR/MSP
The Managed Service Provider (MSP) market is exploding. It’s been this way for a few years now. It makes a ton of sense – MSPs can… Read More
F5 Mirroring and production traffic using the same VLAN
This is a real life sample alert from indeni Description: SOL13478 recommends that you do not mix mirroring and production traffic on the same VLAN.… Read More
F5 Configuration changes shouldn’t be made to the standby device
This is a real life sample alert from indeni for F5 Load Balancing Methods Description: You have made configuration changes to the standby device in… Read More