IDPS Engine Network Utilization High Alarm

Products

• VMware NSX

Issue/Introduction

Title: Alarm for IDPS Engine Network Utilization High
Event ID: distributed_ids_ips.idps_engine_network_oversubscription_high

Alarm Description

• Purpose:Network Utilization for IDPS engine is high
• Impact: There is no visible impact. This alarm is only to alert that the IDPS engine is at or has crossed the high threshold for Network Utilization.

Environment

VMware NSX

Resolution

Steps to Resolve

For 4.0.0 and higher

 

Recommendations:

 

Review reason for oversubscription. Review the IDPS rules to reduce the amount of traffic being subject to IDPS service.