McAfee M4050 Troubleshooting Guide - Page 40

Manager database is full, Error on accessing the Configuration

Get McAfee M4050 - Network Security Platform PDF manuals and user guides
UPC - 731944582832
View all McAfee M4050 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 40 highlights

McAfee® Network Security Platform 6.0 Troubleshooting Network Security Platform Manager database is full We recommend that the customer monitor the disk space on a continuous basis to prevent this from happening. If the Manager database or disk space is full, the Manager will unable to process any new alerts or packet logs. In addition, the Manager may not be able to process any configuration changes, including policy changes and alert acknowledgement. In fact, the Manager may stop functioning completely. To rectify this situation, please perform maintenance operations on the database, including deleting unnecessary alerts and packet logs. Furthermore, please reevaluate database capacity planning and sizing, and monitor free space proactively. The Manager is designed with various file and disk maintenance functions. You can archive alert and packetlog data and then delete the data to free up disk space. It also provides a standalone tool for creating database backups that can be archived for emergency restoration. The Manager also provides disk maintenance alerts, which send proactive system fault messages when certain database dependent processes exceed a user-defined threshold (say 70%). Manager generates faults for various thresholds for database space utilization. Error on accessing the Configuration page On some occasions, accessing the Manager Configuration page can result in an error message. This typically happens if you access various versions of the Manager from the same client or use the Manager client to access other Web-based applications as well. This is a Java-cache related issue. To resolve the issue: 1 On the Manager client, go to Windows Control Panel > Java > General > Settings. 2 Click Delete Files and then click OK in the Delete Temporary Files dialog. This deletes all Java-related temporary files on the client. 3 Log out of the Manager and close Internet Explorer. 4 Log in to the Manager in a new instance of Internet Explorer. Sensor response if its throughput is exceeded Each Sensor model has a limited throughput. For example, the Network Security Platform 2700 Sensor is rated at 600Mbps performance. With the Gigabit interfaces it is theoretically possible to oversubscribe the limit. What happens in this situation? Will it throttle the throughput to 600Mbps or will you just lose the IPS functionality for everything more than 600Mbps? The answer is that the Sensor will drop packets depending on the TCP flow violation settings.We also have the over-subscription feature where the sensor can inline-forward traffic without IPS inspection if it is over-subscribed.There could also be false negatives and the traffic may experience high latency. It is very important that you stay within the operating parameters of the device you deploy. If you are actually running at gigabit speeds, you should probably be running an I-3000/I- 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
McAfee® Network Security Platform 6.0
Troubleshooting Network Security Platform
31
Manager database is full
We recommend that the customer monitor the disk space on a continuous basis to prevent
this from happening.
If the Manager database or disk space is full, the Manager will unable to process any new
alerts or packet logs. In addition, the Manager may not be able to process any
configuration changes, including policy changes and alert acknowledgement. In fact, the
Manager may stop functioning completely.
To rectify this situation, please perform maintenance operations on the database, including
deleting unnecessary alerts and packet logs. Furthermore, please reevaluate database
capacity planning and sizing, and monitor free space proactively. The Manager is
designed with various file and disk maintenance functions. You can archive alert and
packetlog data and then delete the data to free up disk space. It also provides a
standalone tool for creating database backups that can be archived for emergency
restoration.
The Manager also provides disk maintenance alerts, which send proactive system fault
messages when certain database dependent processes exceed a user-defined threshold
(say 70%). Manager generates faults for various thresholds for database space utilization.
Error on accessing the Configuration page
On some occasions, accessing the Manager Configuration page can result in an error
message. This typically happens if you access various versions of the Manager from the
same client or use the Manager client to access other Web-based applications as well.
This is a Java-cache related issue.
To resolve the issue:
1
On the Manager client, go to
Windows Control Panel > Java > General > Settings
.
2
Click
Delete Files
and then click
OK
in the Delete Temporary Files dialog.
This deletes all Java-related temporary files on the client.
3
Log out of the Manager and close Internet Explorer.
4
Log in to the Manager in a new instance of Internet Explorer.
Sensor response if its throughput is exceeded
Each Sensor model has a limited throughput. For example, the Network Security Platform
2700 Sensor is rated at 600Mbps performance. With the Gigabit interfaces it is
theoretically possible to oversubscribe the limit. What happens in this situation? Will it
throttle the throughput to 600Mbps or will you just lose the IPS functionality for everything
more than 600Mbps?
The answer is that the Sensor will drop packets depending on the TCP flow violation
settings.We also have the over-subscription feature where the sensor can inline-forward
traffic without IPS inspection if it is over-subscribed.There could also be false negatives
and the traffic may experience high latency.
It is very important that you stay within the operating parameters of the device you deploy.
If you are actually running at gigabit speeds, you should probably be running an I-3000/I-