Detects Both ATP servers unreachable

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Detects when both the primary and secondary ATP servers are unreachable, likely due to connectivity issues or server overload.

Severity

Trouble

Rule Requirement

Criteria

Action1: actionname = "DETECTION_ACTION_BARRACUDA_BOTH_ATP_SERVERS_UNREACHABLE" select Action1.HOSTNAME,Action1.EVENTID,Action1.TYPE,Action1.SUBTYPE,Action1.SOURCE_IP,Action1.DESCRIPTION,Action1.SOURCETYPE,Action1.MESSAGE

Detection

Execution Mode

realtime

Log Sources

Barracuda