Mail Alert - Gateway disconnected

[walcat_0]

Hi,

We have alerts mailed to us when the 'status connection' threshold in Monitor is 'not connected'.

For example

5Feb2008 19:18:22 fwmanager < mail System Alert message: fwasia1 is disconnected; Object: fwasia1; Event: Exception; Parameter: status_connection; Condition: is 8; Current value: 8; product: System Monitor;

I have a couple of questions :

1.
Whenever i recieve these, i am never sure what to check beyond

If device rebooted
If interface facing towards manager went down

Usually this doesnt show me much, the device hasnt rebooted, and the interface hasnt gone down, so im left wondering.

2.
What events can trigger this alert (guess this goes hand in hand with question 1 maybe) Could be slow response to the query from the manager ?

3.
What/How is this monitored ? Does the manager send some sort of query ? Or does the enforcement point send packets to the manager to say 'hi, im still here'


Thanks in advance for any advice.

[RayPesek]

I've seen sustained 100% CPU on the firewall trip this alert.

Ray

[walcat_0]

Ray,

Thanks for the reply, we also have an alert setup for high CPU (above 90%, off the top of my head), though upon checking we do not get these alerts when the ones for the disconnects come in, so im assuming in this case it might be something else ?

Unless its that hammered it cant send the alerts for high CPU ?

[RayPesek]

Yes, I've had it where it reported disconnected and I couldn't get to the box remotely due to high CPU. I did not get the high CPU alert.

Ray

[walcat_0]

Ray,

Thanks i will check this out, assuming this isnt the issue, has anyone any other ideas what it might be worth checking out ?

Thanks

[RayPesek]

No, sorry, no more ideas.

Ray