Control Plane Flood Protection Threshold Warning
DVAaron
Newbie ✭
every hour I receive the following warning in the Event Logs:
************************
ID: 1443
Category: Firewall Settings
Priority: Warning
Message: Control Plane Flood Protection Threshold Exceeded: XX.XX%
************************
The percentage is variable but always over 80% and the last one is 91.67%.
I can't find much in the way of documentation on this other than how to enable/disable. Is this something to be concerned about? What are the repercussions of being consistently over the threshold?
My equipment: NSa 2600 with SonicOS Enhanced 6.5.4.5-53n
Any information is greatly appreciated.
Best Answers
-
CORRECT ANSWER
shiprasahu93
Moderator
Hello @DVAaron,
This feature provides a threshold on the amount of traffic that goes to the Control Plane. You can disable it or change the threshold from MANAGE | Firewall Settings | Advanced Settings and scrolling down to 'Control Plane Flood Protection' section.
A high number at all times could mean that there is a lot of traffic sent continuously to the Control Plane. It is accountable for all traffic that is dedicated to Core 0 like management, SNMP, VPN, SSLVPN, Logs etc. It would be good to see if there are core 0 spikes on the firewall. The following KB should be helpful.
Thanks!
Shipra Sahu
Technical Support Advisor, Premier Services
5 -
CORRECT ANSWERAWB
Newbie ✭
Worth taking a look at the Core 0 process monitor, it'll show you if a specific task is responsible.
5
