Service Gateway Alerts - Alerting-and-Reporting-with-NCM/Service-Gateway-Alerts

Alerting and Reporting

NetCloud Feature
Monitoring and Diagnostics > Alerts and Logs
ft:locale
en-US
ft:sourceName
Paligo_Prod
Document Type
Article

The Service Gateway alerts are generated based on the health and performance metrics collected from the NetCloud Exchange Service Gateway or point of presence (PoP) in case of a NetCloud SASE network. These alerts enable the customers to stay informed by sending notifications within 15 minutes whenever critical services or infrastructure components of a NCX Service Gateway experiences issues.

The Service Gateway alerts feature is enabled per-account basis and not for a group or a device. The feature can be enabled or disabled for all the networks or security groups in the NetCloud Manager account. This feature cannot be enabled or disabled for a particular group or a device.

These alerts include:

  • Health alert generated every 15 minutes until the service is recovered

  • When CPU or memory usage crosses 90% capacity

  • Service Gateway high availability state changes

  • BGP Neighbor state changes

  • Service Gateway IP address changes

  • Failed login attempts due to:

    • Zero Trust Network Access license

      For example, user authentication failed for user <ID>. Ensure the user has a valid ZTNA license or contact Ericsson Enterprise Wireless Solutions Global Service & Support.

    • Disabled Identity Provider

      For example, user authentication failed for <ID> because the Identity Provider (IDP) is not configured for the requested ZTNA.

    • Network configuration issue

      For example, user authentication failed for <ID> because the network is in a suspended state for the requested ZTNA. Check the network configuration or contact Ericsson Enterprise Wireless Solutions Global Service & Support.

To configure these alerts, navigate to Alerts & Logs > Set Up Alerts > Add > Service Gateway and select the desired alerts or Select All to configure the alerts.

ServiceGateway_Alerts.png
Table 18. Service Gateway Alerts

Alert Categories

Description

Service Gateway Health 

The alert is triggered when the last three sample values of any service gateway performance metric is -1.

The alert appears every 15 minutes until the service becomes operational. Once the alert stops, it indicates that the service is operational.

Note

If the wan0 interface goes down and there is no connectivity with NetCloud Exchange, the NetCloud Manager Connection State alert can be used.

Resources 

An alert is generated if CPU or memory utilization exceeds 90% at the time the scheduled check (cron job) runs. The evaluation is based on the most recent 5-minute data point. The cessation of alerts indicates that the system has returned to a healthy state.

Note

The alerts are generated only if the utilization value stays greater than 90% for more than 5 minutes.

Service Gateway HA Switch Over 

When the state transitions from ‘active’ to any other state, or from any other state to ‘active’.

Note

No alerts are generated for a device when it is shut down.

Note

Currently this alert feature supports only warm standby high availability, cold standby high availability is not supported.

BGP Neighbour State 

When the state changes from established to anything else.

Note

No alert is generated when the BGP neighborship is established, only when it changes from established to any other state.

Service Gateway IP change 

When the LAN, WAN, or Management IP address changes for a device.

Login Attempt 

This alert is triggered when login attempts fail due to one of the following reasons:

  • When no license is available and the user tries to log in to the NetCloud Client or Clientless Zero Trust Network Access Portal.

  • Disabled identity provider.

  • The Secure Connect network is in suspended state at the time of login.