ASP_IDS_LIMITS_MAX_FLOW_RATE_BY_PAIR

System Log Message

ASP_IDS_LIMITS_MAX_FLOW_RATE_BY_PAIR:
proto protocol-number (protocol-name), source-interface-name:source-address:source-port -> destination-address:destination-port, Session creation rate exceeds IDS pair limit; packet dropped

Description

The stateful firewall discarded the packet with the indicated characteristics and did not create a new flow, because the flow rate at the firewall exceeded the intrusion detection services (IDS) limit configured by the rate statement at the [edit services ids rule rule-name term term-name then session-limit by-pair] hierarchy level. The discarded packet contained the indicated information about its protocol (numerical identifier and name), source (logical interface name, IP address, and port number), and destination (IP address and port number).

Type

Event: This message reports an event, not an error

Severity

notice