topic drop rate exceeded, exclude specific host in Network Security

drop rate exceeded, exclude specific host

n.vd.coevering — Tue, 12 Mar 2019 03:52:24 GMT

In our ASA 5520 we see a lot of messages with "drop rate-<x> exceeded". These messages are caused by our Zabbix server that is pinging to about 300 network routers in our nation wide retail network every 60 seconds.

I know that we can ignore these messages or change the threat-detection rate settings. But what we really want is just to exclude the thread-detection for our Zabbix host.

Is it possible and how?

drop rate exceeded, exclude specific host

Vibhor Amrodia — Sat, 01 Mar 2014 20:37:27 GMT

Hi,

If you would like to stop the"drop rate- exceeded" messages for a specific host , that would not be possible on the ASA device. Depending on the configuration on the ASA device , if you have Scanning threat detecttion enabled and this server is being shunned , you would be able to exclude this host using threat-detection scanning-threat except command on the ASA device.

Thanks and Regards,

Vibhor

drop rate exceeded, exclude specific host

n.vd.coevering — Sun, 02 Mar 2014 21:56:55 GMT

Thanks Vibhor for confirming what I thought. We are still debating if we are going to enable shunning.

drop rate exceeded, exclude specific host

INGENIERIA Y CONSULTORIAS WEBREDES LTDA — Mon, 03 Mar 2014 17:47:01 GMT

but you could enable shunning and disable shun for the zabix host, why not test this behavior ???

drop rate exceeded, exclude specific host

n.vd.coevering — Tue, 04 Mar 2014 10:49:25 GMT

Yes, this is possible. But after enabling shunning and excluding the host, warning messages still keep appearing for his host.