Home
  •  

Direct Access_서버_보안_인증 실패 IPv6_경고

DirectAccess_Server_Security_AuthFailuresIPv6_Warning (UnitMonitor)

이 경보는 "Failed Main Mode Negotiations" 카운터(perfmon의 'IPsec AuthIP IPv6' 개체 아래)가 경고 수준을 초과했음을 나타냅니다.

Knowledge Base article:

요약

이 경보는 "Failed Main Mode Negotiations" 카운터(perfmon의 'IPsec AuthIP IPv6' 개체 아래)가 경고 수준을 초과했음을 나타냅니다.

원인

이 경보는 이 카운터의 임계값 설정이 너무 낮게 설정되어 인증 실패 횟수가 경고 수준에 도달했음을 나타냅니다.

해결 방법

이 카운터의 임계값 설정을 높여 거짓 경보를 방지합니다.

Element properties:

TargetDirectAccess_Server_Class
Parent MonitorSystem.Health.SecurityState
CategorySecurityHealth
EnabledTrue
Instance NameIPsec AuthIP IPv6
Counter NameFailed Main Mode Negotiations
Frequency300
Alert GenerateFalse
Alert Auto ResolveFalse
Monitor TypeSystem.Performance.DeltaThreshold
RemotableTrue
AccessibilityPublic
RunAsDefault

Source Code:

<UnitMonitor ID="DirectAccess_Server_Security_AuthFailuresIPv6_Warning" Accessibility="Public" Enabled="true" Target="DirectAccess_Server_Class" ParentMonitorID="Health!System.Health.SecurityState" Remotable="true" Priority="Normal" TypeID="Performance!System.Performance.DeltaThreshold" ConfirmDelivery="false">

  <Category>SecurityHealth</Category>

  <OperationalStates>

    <OperationalState ID="UnderThreshold" MonitorTypeStateID="UnderThreshold" HealthState="Success"/>

    <OperationalState ID="OverThreshold" MonitorTypeStateID="OverThreshold" HealthState="Warning"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <CounterName>Failed Main Mode Negotiations</CounterName>

    <ObjectName>IPsec AuthIP IPv6</ObjectName>

    <InstanceName/>

    <AllInstances>false</AllInstances>

    <Frequency>300</Frequency>

    <Threshold>5</Threshold>

    <NumSamples>5</NumSamples>

    <Absolute>true</Absolute>

  </Configuration>

</UnitMonitor>