Checking Sensor Failover Status; Cabling Failover Through A Network Device - McAfee M4050 - Network Security Platform Troubleshooting Manual

Troubleshooting guide
Hide thumbs Also See for M4050 - Network Security Platform:
Table of Contents

Advertisement

McAfee® Network Security Platform 6.0
1
2
3
4
5
6
7
8
9
10
List of Monitors for Sensor Statistics

Checking Sensor failover status

To ensure that two Sensors comprising a failover pair are communicating via their
interconnection cable, go to each Sensor's CLI and type show failover-status.
Failover should display as enabled (YES), and the peer Sensor should display as UP.

Cabling failover through a network device

Do
To keep overhead low and throughput high, the Sensors do not include layer 2 or 3
headers on the packets they pass over the heartbeat connection, and they pass data
larger than the standard Ethernet maximum frame size (1518 bytes).
If you attempt to place a network device, such as a switch or router, between the heartbeat
ports, the heartbeat connection will fail.
Options > Dashboard > New
Click
Enter a name for the new dashboard in the
Assign Monitor
Click
to view the
Assign an existing Monitor
Select the
Default Monitors
Select
against Category (these are the default choices).
Sensor Performance
Select
against Type to view the choice of Monitors for Sensor
Monitor
Performance in the
Statistics - Flows
Select
and click
Select the Sensor for which you wish to view flow statistics.
Refresh
Click
to view the flow statistics for the selected Sensor.
Follow a similar procedure and select other Monitors for Sensor Performance to view
the relevant Sensor Statistics.
Sensor Flow Statistics: Statistical view of the TCP and UDP flow data processed by a
Network Security Sensor. Checking your flow rates can help you determine if your
Sensor is processing traffic normally, while also providing you with a view of statistics
such as the maximum number of flows supported as well as the number of active TCP
and UDP flows.
IP Spoofing Statistics: Statistics on the number of IP spoofing attacks detected by
McAfee Network Security Platform. Statistics are displayed per direction.
Packet Drop Statistics: Packet drop rate on a Sensor. The statistics is displayed on a
per Sensor basis. The statistics includes the count of number of packets dropped by
Sensor due to set rate limiting on the Sensor and sanity check failures.
Port Packet Drop Statistics: Packet drop rate on a port.
Rate Limiting Statistics: Rate limiting statistics provides the estimated number of
packets dropped/bytes dropped by the Network Security Sensor. You can view rate
limiting statistics for each Sensor (per port), listed in the resource tree of Manager
not
cable the heartbeat connection through an external network device.
Troubleshooting Network Security Platform
to open the Create New Dashboard dialog.
Dashboard Dialog
Assign Monitor Dialog
.
radio button.
choices box.
OK
.
23
.

Advertisement

Table of Contents
loading

This manual is also suitable for:

Network security platform 6.0

Table of Contents