Tuning Half-Open SYN (3050) via nrConfigure on the Unix Director
I am trying to tune event 3050 so that it will fire only once a minute maximum and then only if there have been 10 instances of this event from a particular source. Looking at the parameters in the tuning section, there are a few that seem to make sense, but others that seem to be contrasictory. I am assuming that I want to have the AlarmThrottle set to summarize and the MinHits set to 10. The rest of the parameters I am not sure about. Any ideas?
Re: Tuning Half-Open SYN (3050) via nrConfigure on the Unix Dire
That gives some information but it does not talk about all the parameters, nor does it give much deatil above what it gives already in nrConfigure. Does anyone have more detailed information or can someone tell me specifically how to tune the sig so that it will only fire once for every 10 hits/minute? Also, if there a way to test that it is working right?
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...