This is a real life sample alert from  the World leader in Proactive Network Management for your Check Point Firewalls. Description: Certain packets are being dropped. This is happening because the local VPN gateway is receiving packets in the clear while the current configuration states they should be encrypted. Note that indeni automatically identifies this […]

NOTE: This sample alert is provided for F5 devices. indeni supports a similar alert for Palo Alto Networks firewalls, see DOC-7857. This is a real life sample alert from indeni Description: Preemption in clustering means that if this device’s health is degraded and there’s a fail over in the cluster to another member, and then […]

This is a real life example of interesting Check Point Firewalls commands we found:   There is a command in the Check Point  world that isn’t widely known: cphaprob syncstat It’s for clusters. It’s there to share some stats on how the clustering mechanism is behaving and help identify certain issues. While there’s a Secure Knowledge […]

This is a real life sample alert from indeni Description: This F5 device is licensed to handle up to 200 SSL transactions per second. It is currently handling 190 SSL transactions per second. Manual Remediation Steps: Review your settings and devices to determine if more licenses need to be purchased or you should change the configurations […]

This is a real life sample alert from the leader in Proactive Network Management software: indeni. Description: Some NIC’s duplex is set to half instead of full. This may be an auto-negotiation error. indeni will re-check this alert every 1 minute. If indeni determines the issue has been resolved, it will automatically be flagged as […]

This is a real life sample alert from Indeni Description: A new policy has been recently installed. During the policy installation it appears that there has been a CPU usage level of more than 70% for a period of at least 30 seconds. This may result in a failover from the currently active cluster member […]

This is a real life sample alert from indeni Description: The logging database keys have been altered more than 60 minutes ago and have not been reverted to the default settings yet. Excessive logging for long periods of time may impact performance and stability. Altered BigDB Logging Keys: log.arp.level (Default: Warning) log.config.level (Default: Error) Manual […]

This is a real life alert from Indeni Description: Sync redundancy should no longer be implemented using separate interfaces. This signature has been made possible with the help of Valeri Loukine. Manual Remediation Steps: Replace the separate sync interfaces with one bond interface. Read SK92804 and CCMA’s blog post on this. How does this alert […]

At indeni, we’ve always been big believers in the need to use knowledge to get the job done. Since we’ve started, five years ago, we’ve built an impressive platform for consuming data and information and turning it into usable knowledge. Then, we’ve built a separate platform, that serves as the basis of the product installed […]

This is a real life sample alert from Indeni Description: The Stateful Inspection feature on this firewall has been disabled. Since Stateful Inspection is a core element of the behavior of modern firewalls, this may mean a severe security gap exists. For more information, read Why Turning Off Stateful Inspection On Your Check Point Firewall […]

Many of our users work in the information security operations departments of mid-size to very large enterprises. As such, they regularly work with Check Point firewalls (which indeni supports), When you work with a firewall, you need to make sure the rule base matches the organization’s security policies. To help with that, there are companies such as […]

This is a real life sample alert from indeni Description: Node availability issue detected. Please see additional information below. Affected nodes: 10.10.16.20 (/Common/10.10.16.20) – the URL “/alivetest” returned error code 404. Manual Remediation Steps: You should inspect the node availability state and act according to it’s status. For help on how monitoring of nodes works, […]