This is a real life sample alert from our indeni alert guide for Palo Alto Networks Firewall.
The firewall has entered maintenance mode due to an unknown reason. indeni will stop collecting data from this firewall until it exits maintenance mode.
Manual Remediation Steps:
Connect to the firewall using SSH (see DOC-5719) and determine the cause.
How does this alert work?
indeni uses a mix of SSH, API calls and SNMP to communicate with Palo Alto Networks firewalls. If it identifies that the firewall is in maintenance mode (for example, via SSH), it will alert.