Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 463 / 861

462 Monitoring the security gateway
Viewing system health
Viewing system health
The Overall Health window provides real-time information about the health of the security gateway
appliance when it is running. This information can alert you to spikes in usage, unusual connection
activity, high disk usage, and problems with appliance temperature.
The appliance also provides indicators of appliance health. For more information, see the sections on
front panel status indicators and LCD system information in the
Symantec Gateway Security Series
5000 v3.0 Installation Guide .
By default, the appliance is polled for system health information every thirty seconds. You can modify
the system poll interval.
Sensors on the appliance enable the following monitoring of the appliance:
■
Monitoring network throughput
■
Monitoring system usage and connections
■
Monitoring disk usage
■
Monitoring appliance temperature and fan status
■
Changing the health check poll interval
Monitoring network throughput
The Network Throughput chart lets you see the volume of traffic through the security gateway. You
can view activity on all network interfaces, or select a specific interface to monitor. Unusual spikes in
network throughput can warn you of attacks on the security gateway.
Prerequisites
Complete the following task before beginning this procedure:
■
The appliance must be running.
To view network throughput
1 In the SGMI, in the left pane, under Monitors, click Overall Health .
2
In the right pane, under Network Throughput, in Network Interface drop-down list, select an
interface.
The SGMI displays a chart of the network throughput on the selected interface.
A key to the right of the chart identifies the incoming and outgoing traffic through the interface.
The legend at the bottom of the chart indicates time. The legend to the left of the chart shows
megabytes per second.
Related Information
None.
Notifications Lets you configure notification methods and security gateway actions for events at a selected
severity level.
Notification methods include email messages, pager notification, and SNMP traps.
Configurable actions include blacklisting and activating a specified client program.