Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Managing Traffic Threshold Filters on the SMS!

    • Updated:
    • 29 Aug 2017
    • Product/Version:
    • TippingPoint SMS All
    • TippingPoint Virtual SMS
    • Platform:
Summary

Threshold Filter State:

Traffic Threshold filters enables the SMS to detect statistical changes in network traffic patterns. The SMS determines normal traffic patterns based on the network statistics over time, and traffic threshold filters generate alerts when network traffic varies from the norm. Through the Events - Traffic Threshold State screen, you can review, edit, and reset Traffic Threshold filters.

Details
Public

How To: Common Task

  1. Log in to the SMS from a client.
  2. On the top Navigation menu click Events.
  3. On the Events screen, click Traffic Threshold State in the Navigation pane. The Traffic Thresholds screen displays.

 

How To: Edit a Traffic Threshold Filter:

  1. On the Events - Traffic Threshold State screen, select a filter.
  2. Right-click the selected filter and select Edit. The Filters - Traffic Threshold - Edit dialog box displays.
  3. For the Thresholds Area, modify one or more of the following:
    • For Monitoring, select an option: Monitor with thresholds or Monitor only. The Monitor only option sets the system to generate a report without triggering traffic thresholds.
    • For Thresholds, you can modify up to 4 thresholds for each filter. For each of the following options, enter a value in percent and select an action set.
      • Enable Above Normal Major
      • Enable Above Normal Minor
      • Enable Below Normal Major
      • Enable Below Normal Minor
  4. For the Network Settings Area, modify one or more of the following:
    • Select the direction of the flow for the segment ports: A to B or B to A.
    • Select the Units per Second and the amount to be based on.
    • The unit values include packetsbytes, and connections. The period values include the last minute, hour, day, 7 days, 30 days, and 35 days.
    • Protocol - Select the type of protocol from the drop-down list, including TCP, Other, ICMP, and UDP.
    • Application - Select the type of protocol and enter the Port. Select one of the following to apply the type to: requests, replies, or both.
  5. Click OK.

Note: If you wish to modify the filter and keep the original, just click on Save As and rename the new filter after you make the modification.

 

How To: Reset a Traffic Threshold Filter

  1. On the Events - Traffic Threshold State screen, select a filter to reset.
  2. Right-click the entry and select Reset.
  3. The Traffic Threshold filter resets. To modify the filter to keep it from constantly triggering, edit the settings.

 

How To: Reset All Traffic Threshold Filters

  1. On the Events - Traffic Threshold State screen, click Reset All.
  2. All Traffic Threshold filters reset. To modify a filter to keep it from constantly triggering, edit the settings of a particular filter.

 

 

Reference: SMS User Guide

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000088145
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.