IDPS Engine Network Utilization High Alarm

Products

• VMware NSX

Issue/Introduction

Title: Alarm for IDPS Engine Network Utilization High 
Event ID: distributed_ids_ips.idps_engine_network_oversubscription_high

Alarm Description

• Purpose:Network Utilization for IDPS engine is high
• Impact: In the event of network oversubscription, the system will begin to drop packets that are destined to the IDS Engine. There are no log messages or errors that report this condition.

Environment

VMware NSX

Resolution

Steps to Resolve

For 4.0.0 and higher

 

Recommendations:

 

Review reason for oversubscription. Review the IDPS rules to reduce the amount of traffic being subject to IDPS service.