Traffic Bypassed - IDPS Engine CPU Oversubscription Alarm

Products

• VMware NSX

Issue/Introduction

Title: Alarm for Traffic Bypassed - IDPS Engine CPU Oversubscription
Event ID: distributed_ids_ips.idps_engine_bypassed_traffic_cpu_oversubscribed

Alarm Description

• Purpose:The IDPS engine has insufficient CPU resources and is unable to keep pace with the incoming traffic resulting in the excess traffic being bypassed.
• Impact: Traffic is being bypassed by the IDPS engine on ESX Host.

Environment

VMware NSX

Resolution

Steps to Resolve

For 4.0.0 and higher

 

Recommendations:

 

Review reason for oversubscription. Move certain applications to different host.