1. What is the device type?
CheckPoint GAiA (Any platform)
2. What is the issue that you want to automate the detection/triage of?
Identify when the connection count spikes significantly (15% -> 60% usage) within the last hour.
3. How can the issue be diagnosed?
Regularly track the connection count as a % of the total usage (current/limit) and identify when the % increases significantly.
4. What are the Remediation Steps?
Investigate if the connection growth was expected/organic. Otherwise, Identify if there are significant number of incomplete sessions.
5. Are there known ways to reproduce this issue?