High rate of blocked connections

[juniorlima]

Hi there!

I've received the alert 'bout "High rate of blocked connections from origin 'FW-O1'"

Does anyone knows how can I get those informations? I've been loking in LOGS but I couldn't find anything helpfull!

[Tal_Ben_Bassat]

Hi, 

This automation is monitoring the logs that are dropped or rejected on your environment.

We searching for the filter : action:("Drop" or "Reject"). 

In general , we (at Playblocks) are planning to extend this notification and add additional data in this message like the top source that was dropped. 

You can contact me if you need any assistance, 

Thanks

Tal

[juniorlima]

Hi there, 

Thank you very much for your response!

There's Roadmap for extend this notification and add additional data in this message?

[Tal_Ben_Bassat]

@juniorlima  - we updated the top source in the notification message and also added the number of drops related to this source.