Categories › General › User Contribution Center › #Troubleshooting# How to Perform Health Check on Sec ...
#Troubleshooting# How to Perform Health Check on Security Appliance NSF 8.0.85
  

Sangfor Jojo Lv5  Posted 2024-Jul-09 15:22

*Product: NSF
*Version:8.0.85

*1. Introduction

1.1 User Scenario
  
Nowadays, the importance of having an efficient firewall is fundamental because it ensures a security perimeter for the corporate network. Being a network device in operation 24 hours a day, it is essential to monitor it and perform routine operations to keep it in optimal condition.
  
Firewalls play a crucial role in safeguarding networks from cyber threats, and regular maintenance ensures their effectiveness.

1.2 Requirements
The user's network has NSF device as firewall.

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
  
*2. Health check steps
  
In this guide, we will see the main checks and maintenance tasks performed to keep the firewall in optimal condition. This guide is not specific to any model of Sangfor NSF.

2.1 Check Hardware Status
· Verify the power supply, fans, and other physical components.
· Inspect the LEDs on the device to ensure they indicate normal operation.

2.2 Review System Logs
· Navigate to the system logs section and review any error messages or warnings.
·  Look for anomalies related to CPU usage, memory, or network interfaces.
  
2.3 Check Network Interfaces
·Verify that all network interfaces (WAN, LAN, DMZ, etc.) are up and operational.
· Ensure that IP addresses, subnet masks, and gateway settings are configured correctly.

  
2.4 Security Policy Inspection
·Review the security policies configured on the appliance.
·Ensure that rules are correctly defined and match the desired security posture.

  
2.5 Update Signatures and Threat Intelligence

·Sangfor Network Secure relies on threat intelligence feeds to detect and prevent attacks.
·Regularly check that all databases in the Security Capability Update are updated.

2.6 Test Connectivity and Traffic Flow

·Perform connectivity tests by sending traffic through the appliance.
·Verify that traffic correctly passes through the firewall rules and policies (both inbound and outbound) by looking at the hits on the policy page. It’s also a good idea to do a precise traffic test through the troubleshooting section of NSF to ensure that the policy is working as expected.

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
  
*3. Precaution

1. Keep in mind that it’s recommended to monitor firewall metrics with tools like PRTG or Zabbix through SNMP to have historical data about traffic, interface uptime and so on (with alerts and triggers configured).
  
It’s also a good idea to set email alerts on Sangfor NSF about login failures and other user-driven events.
  


This article is written by Enrico Vanzetto who is a technical engineer and has much experience and a better understanding of Sangfor network secure (NGAF), HCI, Endpoint Secure, VDI, and Cyber Command products. If you want to know more about him, you can follow him.


This topic contains more resources

You must log in to download or view the file. Not registered yet? Register

x

Like this topic? Like it or reward the author.

Creating a topic earns you 5 coins. A featured or excellent topic earns you more coins. What is Coin?

Enter your mobile phone number and company name for better service. Go
Newbie517762 Lv5  Posted 2024-Jul-10 09:09
  
Thanks for sharing.
Prosi Lv3  Posted 2024-Jul-10 09:21
  
Thank you for your information
CLELUQMAN Lv4  Posted 2024-Jul-10 10:44
  
thank you. good.
if you include screenshot , it would be better.
keep up the good work
addimasqi Lv2  Posted 2024-Jul-10 18:33
  
This article is good enough and will help us to know more about NSF.  
vesogi7900 Lv2  Posted 2024-Jul-11 12:24
  
Thanks for sharing
ilham Lv1  Posted 2024-Jul-12 11:16
  
great !!
Thank You For Sharing this

Trending Topics

Board Leaders