VMware SD-WAN Edge - Device Congestion Alert - Packet Drops

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


The VMware Edge Cloud Orchestrator reported an edge congestion event, where the Edge is dropping a large number of packets on one of its interfaces. This could indicate an ongoing Denial of Service attack against an appliance. Please make sure that Network Flood Protection is turned on.

Attribute Value
Type Analytic Rule
Solution VMware SASE
ID a88ead0a-f022-48d6-8f53-e5a164c4c72e
Severity Medium
Kind Scheduled
Tactics Impact
Techniques T1498
Required Connectors VMwareSDWAN
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
VMware_VECO_EventLogs_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to VMware SASE