【NSF】Email alarm shows network anomaly detection alert (netstack)

Issue Description

The NSF device did not experience a significant increase in traffic or sessions during the alarm period. However, the user received an email notification indicating a network anomaly detection alert.

Error/Warning Logs

Handling Process

1. Verify the throughput and session data to identify any significant traffic increments during the specified time.
2. Verify if there is an increase in sessions during the specified time.

Root cause

False alarm

Solution

Install patch KB_AF_alarm_netstack_2024121000088_8095SP1.bin
KB_AF_alarm_netstack_2024121000088_8095SP1
note: The patch does not restart service of device.