About YParreno

YParreno · ‎08-29-2022

Hi, it cost the data plane CPU go up to 92% and many people started to complain about the availability of the applications, I helped a little bit by blocking non US IPs, but still happen from US IPs, not as much as before. sometimes the dp CPU goes up to 80 but it goes back down once these threat traffic stop sending their request. I cannot block the IPs since it changes every now and them... I will update the software since I'm using 10.1.5-h1 to see it that fix it, as I read this software can have some DoS vulnerabilities.

YParreno · ‎08-26-2022

hello everyone, Firewall is showing session end reason as 'Threat' in traffic logs for the traffic blocked under url filtering profile. this is showing repeatedly, i'm afraid is consuming the Data Plane CPU. IT could be the action of blocking or just the report. But i would like to know if there is a way to block this traffic way before is stop. the source sometimes is the same IP, but then changes to another. thanks,

YParreno · ‎07-26-2022

thank you, that is exactly what i did.

YParreno · ‎03-09-2022

Hello, I'm trying to configure a Security Policy to only allow US-region IP addresses to hit our network. I added as a first rule to allow any untrust us region to destination untrust US region. I am not sure if this is correct. maybe I'm allowing all traffic within US, that probably is not supposed to be allowed. thanks #urlfiltering #regionfiltering

Member Since	‎03-02-2022 08:47 AM
Date Last Visited	‎05-09-2023 04:30 PM
Posts	5

Online Status	Offline
Date Last Visited	‎05-09-2023 04:30 PM

About YParreno

Re: session end reason as 'Threat'

session end reason as 'Threat'

Re: Security Policy - US access only

Security Policy - US access only

Nominated Discussion: Security Policy - US access only

Re: session end reason as 'Threat'

session end reason as 'Threat'

Re: Security Policy - US access only

Security Policy - US access only