McAfee® Network Security Platform 6.0
System Fault Messages
55
Fault
Severity
Description/Cause
Action
VIDS creation
failure
Critical
This fault generally occurs in
situations where the port in
question is configured
incorrectly. For example, a pair
of ports is configured to be in
different operating modes (1A is
in-line while 1B is in SPAN).
Check the configuration of the
port pair to see if there is an
inconsistency, and make the
port pair run in the same
operating mode.
NTBA is
unreachable
Critical
Indicates that the NTBA cannot
communicate with the Manager.
The connection between the
NTBA and the Manager is down,
or the NTBA has been
administratively disconnected.
Check that a connection route
exists between the Manager
and the NTBA.
Check the NTBA’s status
using the status command in
the NTBA command line
interface, or ping the NTBA or
the NTBA gateway to ensure
connectivity to the NTBA. This
fault clears when the Manager
detects the NTBA again.
Error faults
The faults listed in the following table have a severity of
Error
.
Fault
Severity
Description/Cause
Action
Alert channel is
down
Error
Indicates a failure to communicate
with the Sensor via the channel on
which the Manager listens for
Sensor alerts.
This fault clears when the
alert channel is back up.
Approaching alert
capacity
threshold
Error
Displays the percentage of space
occupied by alerts in the database.
As available space decreases, this
message will continue to appear—
at 50%, 70%, 90% and 100%.
Once you’ve exceeded this
threshold, an ‘Exceeding’ fault will
appear.
Please perform maintenance
operations to clean the
database. Delete
unnecessary alerts, such as
alerts older than a specific
number of days.
Incident update
failed
Error
The Manager is unable to accept
more incidents. You have reached
the maximum number of incidents
that can be accepted by the
Manager.
Delete old incidents to
provide room for incoming
incidents. The fault clears
when the Manager can
accept incoming incidents.
Internal packet
drop error
Error
Sensor is dropping packets due to
extreme traffic load.
Reduce the amount of traffic
passing through the Sensor
as this fault indicates
oversubscription of traffic on
the Sensor