McAfee M4050 Troubleshooting Guide - Page 85

Other faults, IPS Quarantine

Page 85 highlights

McAfee® Network Security Platform 6.0 System Fault Messages Fault Alert archival in progress Severity Informational Vulnerability data import from McAfee Vulnerability Manager database was successful Informational Weekly scheduled report Informational generation complete Weekly scheduled report Informational generation in progress Description/Cause Manager is archiving the alerts, and this is in progress Action Wait for the Alert archival to complete This message indicates that the vulnerability data import from McAfee Vulnerability Manager database is successful. For more information on importing vulnerability data reports in Manager, see Importing Vulnerability Scanner Reports, Integration Guide. Weekly scheduled report This message is for generation process user information. No successfully completed action required. Weekly scheduled report This message is for generation process in user information. No progress action required. Other faults IPS Quarantine In the case of IPS Quarantine, an error message is raised when the number of quarantine rules exceed the permitted limit. The Sensor raises a fault message to the Manager when the number of quarantine rules exceeds the maximum permitted limit. The fault is displayed as IP: IPS quarantine block nodes exhausted. This can be viewed as an alert in the Threat Analyzer. Note : You can have up to 1000 IPS Quarantine rules for an IPv4 addresses, and up to 500 IPS Quarantine rules for IPv6 addresses. For more information on quarantine and remediation functionality, see IPS Quarantine settings in the IPS Sensor, IPS Configuration Guide You can view the faults from the Operational Status menu in Manager. For more information, see Fault messages for Vulnerability Manager Scheduler and Automatic report import using Scheduler, Integration Guide. 76

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95

McAfee® Network Security Platform 6.0
System Fault Messages
76
Fault
Severity
Description/Cause
Action
Alert archival in progress
Informational
Manager is archiving the
alerts, and this is in
progress
Wait for the Alert
archival to complete
Vulnerability data import
from McAfee Vulnerability
Manager database was
successful
Informational
This message indicates
that the vulnerability data
import from McAfee
Vulnerability Manager
database is successful.
For more information on
importing vulnerability
data reports in Manager,
see
Importing
Vulnerability Scanner
Reports
,
Integration Guide
.
Weekly scheduled report
generation complete
Informational
Weekly scheduled report
generation process
successfully completed
This message is for
user information. No
action required.
Weekly scheduled report
generation in progress
Informational
Weekly scheduled report
generation process in
progress
This message is for
user information. No
action required.
Other faults
IPS Quarantine
In the case of IPS Quarantine, an error message is raised when the number of quarantine
rules exceed the permitted limit. The Sensor raises a fault message to the Manager when
the number of quarantine rules exceeds the maximum permitted limit. The fault is
displayed as
IP: IPS quarantine block nodes exhausted
. This can be viewed as an alert in the
Threat Analyzer.
Note :
You can have up to 1000 IPS Quarantine rules for an IPv4 addresses, and
up to 500 IPS Quarantine rules for IPv6 addresses.
For more information on quarantine and remediation functionality, see
IPS
Quarantine settings in the IPS Sensor
,
IPS Configuration Guide
You can view the faults from the
Operational Status
menu in Manager. For more information,
see
Fault messages for Vulnerability Manager Scheduler
and
Automatic report import
using Scheduler
,
Integration Guide
.