F5 Big IP: UDP open ports Health Monitor

Jalasoft.Xian.SmartManagementPacks.F5BigIp.UDPOpenPorts.1.2 (AggregateMonitor)

This monitor catches Xian events that notifies when the UDP open ports has changed its state.

Knowledge Base article:

Summary

UDP open ports is over threshold.

The total number of open UDP ports is above the maximum threshold configured in Xian Network Manager 2012.

Causes

Among common causes, an operating system could have opened unnecessary ports as part of a default install. Opening only the necessary ports to avoid the system to be compromised is recommended.

Resolutions

Run a port scanning software confirming exactly what UDP ports this device accept connections and what application or process is using every port.

Additional

Monitors the number of UDP open ports on the device.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.F5Networks.JsXF5BigIpV9SnmpDeviceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
UDP open ports Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.F5BigIp.UDPOpenPorts.1.2" Accessibility="Public" Enabled="true" Target="ThirdParty_F5Networks!Jalasoft.Xian.Common.Elements.ThirdParty.F5Networks.JsXF5BigIpV9SnmpDeviceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="UDPOpenPorts_AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Low</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<Algorithm>WorstOf</Algorithm>
</AggregateMonitor>