CHAPTER 14: Monitoring the Firebox Vclass
376 Vcontroller
Policy counters per policy
Packets Disc. at
Interface 0(Private)(%)
Percentage of packets discarded at
Interface 0
Packets Disc. at Interface
2(DMZ)(%)
Percentage of packets discarded at
Interface 2
Packets Disc. by IPSEC Error (%) Percentage of packets discarded by
IPSEC errors (decryption error,
authentication error, replay error).
Packets Disc. by Decryption
Error (%)
Percentage of packets discarded by
Decryption errors
Packets Disc. by Authentication
Error (%)
Percentage of packets discarded by
Authentication errors
Packets Disc. by Replay Error (%) Percentage of packets discarded by
Replay errors
Counter Name Description of Counter’s Function
Counter Name Description of Counter’s Function
Traffic (Bytes) Number of bytes handled by a policy
Traffic (Packets) Number of packets handled by a policy
Throughput (Bytes/sec) Throughput in bytes/sec of a policy
Throughput (Pkts/sec) Throughput packets/sec of a policy
Number of SA Number of SA belongs to a policy
Packet Disc. (%) Packet discarded rate of a policy
Decryption Error Packets Number of packets handled by a policy
with decryption error
Authentication Error Packets Number of packets handled by a policy
with authentication error