Notify on high rate of blocked connections

Supported Product

Check Point Security Management Server

Note:

Make sure that you have enabled Log Sharing in On-boarding Products.

Parameters

Number of dropped or rejected connections

Set the number of dropped or rejected connections after which the system notifies the Administrator.

In time duration

Set the time duration for the blocked connections.

Select the checkbox if you want to count failures by each origin individually.

Open a ticket if high rate of blocked connections was identified

Select the checkbox if you want to open a ticket when high rate of blocked connections was identified.

Trigger

When the number of blocked connections match the specified value in the automation parameters.

To view the example of this log, click Run.

Flow