Cisco Cisco Firepower Management Center 4000

Any

Use the Inline Link Mismatch Alarm health status module to track when the interfaces on either side of 
an inline set negotiate different connection speeds. If different negotiated speeds are detected, this 
module generates an alert.

Admin/Maint

In the Health Policy Configuration page, select 

.

The Health Policy Configuration — Inline Link Mismatch Alarms page appears.

Select 

 for the 

 option to enable use of the module for health status testing.

You have three options:

To save your changes to this module and return to the Health Policy page, click 

.

To return to the Health Policy page without saving any of your settings for this module, click 

.

To temporarily save your changes to this module and switch to another module’s settings to modify, 
select the other module from the list at the left of the page. If you click 

 when you 

are done, all changes you made will be saved; if you click 

, you discard all changes.

You must apply the health policy to the appropriate Defense Center if you want your settings to take 
effect. See 

 for more information.

Protection

Use the Intrusion Event Rate health status module to set limits for the number of packets per second that 
trigger a change in the health status. If the event rate on the monitored device exceeds the number of 
events per second configured in the Events per second (Warning) limit, the status classification for that 
module changes to Warning. If the event rate exceeds the number of events per second configured in the 
Events per second (Critical) limit, the status classification for that module changes to Critical. That 
status data feeds into the health monitor.

Typically, the event rate for a network segment averages 20 events per second. For a network segment 
with this average rate, Events per second (Critical) should be set to 

50

 and Events per second (Warning) 

should be set to 

30

. To determine limits for your system, find the Events/Sec value on the Statistics page 

for your device (

), then calculate the limits using these formulas:

Events per second (Critical) = Events/Sec * 2.5

Events per second (Warning) = Events/Sec * 1.5

The maximum number of events you can set for either limit is 999, and the Critical limit must be higher 
than the Warning limit. 

Admin/Maint

On the Health Policy Configuration page, select 

.