•Connection Limit - Indicates the system connection limit has been reached. Additional connections are passed through unoptimized. The alarm clears when the SteelHead moves out of this condition.

•CPU - The appliance has entered admission control due to high CPU use. During this event, the appliance continues to optimize existing connections, but new connections are passed through without optimization. The alarm clears automatically when the CPU usage has decreased.

•MAPI - The total number of MAPI optimized connections have exceeded the maximum admission control threshold. By default, the maximum admission control threshold is 85 percent of the total maximum optimized connection count for the client-side SteelHead. The SteelHead reserves the remaining 15 percent so that the MAPI admission control doesn’t affect the other protocols. The 85 percent threshold is applied only to MAPI connections. RiOS is now passing through MAPI connections from new clients but continues to intercept and optimize MAPI connections from existing clients (including new MAPI connections from these clients). RiOS continues optimizing non-MAPI connections from all clients. The alarm clears automatically when the MAPI traffic has decreased; however, it can take one minute for the alarm to clear.

•Memory - The appliance has entered admission control due to memory consumption. The appliance is optimizing traffic beyond its rated capability and is unable to handle the amount of traffic passing through the WAN link. During this event, the appliance continues to optimize existing connections, but new connections are passed through without optimization. No other action is necessary; the alarm clears automatically when the traffic has decreased.

•TCP - The appliance has entered admission control due to high TCP memory use. During this event, the appliance continues to optimize existing connections, but new connections are passed through without optimization. The alarm clears automatically when the TCP memory pressure has decreased.

•Cluster Neighbor Incompatible - Enables an alarm and sends an email notification if a connection-forwarding neighbor in a SteelHead Interceptor cluster has path selection enabled while path selection isn’t enabled on another appliance in the cluster.

•Multiple Interface - Enables an alarm and sends an email notification if the connection to an appliance in a connection forwarding cluster is lost or is disconnected due to a configuration incompatibility.

•Single Interface - Enables an alarm and sends an email notification if the connection to a SteelHead connection-forwarding neighbor is lost.

•Rising Threshold - Specify the rising threshold. When an alarm reaches the rising threshold, it is activated. The default value is 90 percent.

•Reset Threshold - Specify the reset threshold. When an alarm reaches the lowest or reset threshold, it is reset. After an alarm is triggered, it isn’t triggered again until it has fallen below the reset threshold. The default value is 70 percent.

•Corruption - Enables an alarm and sends an email notification if the RiOS data store is corrupt or has become incompatible with the current configuration. To clear the RiOS data store of data, restart the optimization service and click Clear the Data Store.

•Data Store Clean Required - Enables an alarm and sends an email notification if you need to clear the RiOS data store.

•Encryption Level Mismatch - Enables an alarm and sends an email notification if a data store error such as an encryption, header, or format error occurs.

•Synchronization Error - Enables an alarm if RiOS data store synchronization has failed. The RiOS data store synchronization between two SteelHeads has been disrupted and the RiOS data stores are no longer synchronized.

•Disk Error - Enables an alarm when one or more disks is offline. To see which disk is offline, enter this CLI command from the system prompt:

•Fan Error - Enables an alarm and sends an email notification if a fan is failing or has failed and needs to be replaced. By default, this alarm is enabled.

•Flash Error - Enables an alarm when the system detects an error with the flash drive hardware. By default, this alarm is enabled.

•IPMI - Enables an alarm and sends an email notification if an Intelligent Platform Management Interface (IPMI) event is detected. (Not supported on all appliance models.)

•Management Disk Size Error - Enables an alarm if the size of the management disk is too small to support the SteelHead (virtual edition) model.

•Memory Error - Enables an alarm and sends an email notification if a memory error is detected, for example, when a system memory stick fails.

•Other Hardware Error - Enables an alarm if a hardware error is detected. These issues trigger the hardware error alarm:

•Power Supply - Enables an alarm and sends an email notification if an inserted power supply cord doesn’t have power, as opposed to a power supply slot with no power supply cord inserted. By default, this alarm is enabled.

•SSD Write Cycle Level Exceeded - Enables an alarm if the accumulated SSD write cycles exceed a predefined write cycle 95 percent level on SteelHead models 7050L and 7050M. If the alarm is triggered, the administrator can swap out the disk before any problems arise.

•An interface is connected and the WAN bandwidth is set higher than its bandwidth link rate: for example, if the bandwidth link rate is 1536 kbps, and the WAN bandwidth is set to 2000 kbps.

•A nonzero WAN bandwidth is set and QoS is enabled on an interface that is disconnected; that is, the bandwidth link rate is 0.

•A previously disconnected interface is reconnected, and its previously configured WAN bandwidth was set higher than the bandwidth link rate. The Management Console refreshes the alarm message to inform you that the configured WAN bandwidth is set higher than the interface bandwidth link rate.

•Appliance Unlicensed - This alarm triggers if the SteelHead does not have a license installed for its currently configured model. For details about updating licenses, see Managing licenses and model upgrades.

•Autolicense Critical Event - This alarm triggers on a SteelHead (virtual edition) appliance when the Riverbed Licensing Portal can’t respond to a license request with valid licenses. The Licensing Portal can’t issue a valid license for one of these reasons:

•Autolicense Informational Event - This alarm triggers if the Riverbed Licensing Portal has information regarding the licenses for a SteelHead (virtual edition) appliance. For example, the SteelHead (virtual edition) appliance displays this alarm when the portal returns licenses that are associated with a token that has been used on a different SteelHead (virtual edition) appliance.

•Licenses Expired - This alarm triggers if one or more features has at least one license installed, but all of them are expired.

•Licenses Expiring - This alarm triggers if the license for one or more features is going to expire within two weeks.

•Internal Error - Enables an alarm and sends an email notification if the RiOS optimization service encounters a condition that might degrade optimization performance. By default, this alarm is enabled. Go to the Administration > Maintenance: Services page and restart the optimization service.

•Service Status - Enables an alarm and sends an email notification if the RiOS optimization service encounters a service condition. By default, this alarm is enabled. The message indicates the reason for the condition. These conditions trigger this alarm:

•Unexpected Halt - Enables an alarm and sends an email notification if the RiOS optimization service halts due to a serious software error. By default, this alarm is enabled.

•An interface is connected and the WAN bandwidth is set to higher than its bandwidth link rate: for example, if the bandwidth link rate is 100 Mbps, and the WAN bandwidth is set to 200 Mbps.

•A nonzero WAN bandwidth is set and QoS is enabled on an interface that is disconnected; that is, the bandwidth link rate is 0.

•A previously disconnected interface is reconnected, and its previously configured WAN bandwidth was set higher than the bandwidth link rate. The Management Console refreshes the alarm message to inform you that the configured WAN bandwidth is set greater than the interface bandwidth link rate.

•Proxy File Service Configuration - Indicates that a configuration attempt has failed. If the system detects a configuration failure, attempt the configuration again.

•Proxy File Service Operation - Indicates that a synchronization operation has failed. If the system detects an operation failure, attempt the operation again.

•Connection with Controller Lost - Indicates that the peer SteelHead is no longer connected to the secure transport controller because:

•Registration with Controller Unsuccessful - Indicates that the peer SteelHead isn’t registered with the secure transport controller, and the controller doesn’t recognize it as a member of the secure transport group.

•Secure Vault Locked - Indicates that the secure vault is locked. To optimize SSL connections or to use RiOS data store encryption, the secure vault must be unlocked. Go to Administration > Security: Secure Vault and unlock the secure vault.

•Secure Vault New Password Recommended - Indicates that the secure vault requires a new, nondefault password. Reenter the password.

•Secure Vault Not Initialized - Indicates that an error has occurred while initializing the secure vault. When the vault is locked, SSL traffic isn’t optimized and you can’t encrypt the RiOS data store. For details, see Unlocking the secure vault.

•Peer Mismatch - Needs Attention - Indicates that the appliance has encountered another appliance that is running an incompatible version of system software. Refer to the CLI, Management Console, or the SNMP peer table to determine which appliance is causing the conflict. Connections with that peer will not be optimized, connections with other peers running compatible RiOS versions are unaffected. To resolve the problem, upgrade your system software. No other action is required as the alarm clears automatically.

•Software Version Mismatch - Degraded - Indicates that the appliance is running an incompatible version of system software. To resolve the problem, upgrade your system software. No other action is required as the alarm clears automatically.

•Non-443 SSL Servers - Indicates that during a RiOS upgrade (for example, from 8.5 to 9.0), the system has detected a preexisting SSL server certificate configuration on a port other than the default SSL port 443. SSL traffic might not be optimized. To restore SSL optimization, you can add an in-path rule to the client-side SteelHead to intercept the connection and optimize the SSL traffic on the nondefault SSL server port.

•SSL Certificates Error (SSL CAs) - Indicates that an SSL peering certificate has failed to reenroll automatically within the Simple Certificate Enrollment Protocol (SCEP) polling interval.

•SSL Certificates Error (SSL Peering CAs) - Indicates that an SSL peering certificate has failed to re-enroll automatically within the SCEP polling interval.

•SSL Certificates Expiring - Indicates that an SSL certificate is about to expire.

•SSL Certificates SCEP - Indicates that an SSL certificate has failed to re-enroll automatically within the SCEP polling interval.

•SSL HSM private key not accessible - Indicates that the server-side SteelHead can’t import the private key corresponding to the proxy certificate from a SafeNet Luna Hardware Security Module (HSM) server. The private key is necessary to establish mutual trust between the SteelHead and the HSM for proxied SSL traffic optimization. Check that the server-side SteelHead can access the HSM device and that the private key exists on the HSM server. For details, see the Riverbed Command-Line Interface Reference Manual.

•Critical Temperature - Enables an alarm and sends an email notification if the CPU temperature exceeds the rising threshold. When the CPU returns to the reset threshold, the critical alarm is cleared. The default value for the rising threshold temperature is 70ºC; the default reset threshold temperature is 67ºC.

•Warning Temperature - Enables an alarm and sends an email notification if the CPU temperature approaches the rising threshold. When the CPU returns to the reset threshold, the warning alarm is cleared.

•Configuration - Enables an alarm when an error occurs with the web proxy configuration.

•Service Status - Enables an alarm when an error occurs with the web proxy service.

•Select the Report Events via Email check box in this page and specify an email address.

•Select the Enable Email Notification check box in the Optimization > Network Services: In-Path Rules page.

•Admission control

•CPU utilization (rising threshold, reset threshold)

•Temperature (rising threshold, reset threshold)

•Data store wrap frequency

•Domain authentication alert

•Network interface duplex errors

•Network interface link errors

•Fan error

•Flash error

•Hardware error

•IPMI

•Licensing

•Memory error

•Neighbor incompatibility

•Network bypass

•NFS V2/V4 alarm

•Non-SSL servers detected on upgrade

•Optimization service (general service status, optimization service)

•Extended memory paging activity

•Secure vault

•System disk full

•Software version mismatch

•Storage profile switch failed

•TCP Stop Trigger scan has started

•Asymmetric routes

•Expiring SSL certificates

•SSL peering certificate SCEP automatic re-enrollment

•Connection forwarding (ACK timeout, failure, lost EOS, lost ERR, keepalive timeout, latency exceeded, read info timeout)

•Prepopulation or Proxy File Service

•Addition of in-path rules

•Data store corruption

•System details report

•Domain join error

•RAID

•Optimization service - unexpected halt

•Critical temperature

•Disk error

•SSD wear warning

•Emergency - Emergency, the system is unusable.

•Alert - Action must be taken immediately.

•Critical - Conditions that affect the functionality of the SteelHead.

•Error - Conditions that probably affect the functionality of the SteelHead.

•Warning - Conditions that could affect the functionality of the SteelHead, such as authentication failures.

•Notice - Normal but significant conditions, such as a configuration change. This is the default setting.

•Info - Informational messages that provide general information about system operations.

•Time - Select Day, Week, or Month from the drop-down list. The default setting is Day.

•Disk Space - Specify how much disk space, in megabytes, the log uses before it rotates. The default value is 16 MB.

•Emergency - Emergency, the system is unusable.

•Alert - Action must be taken immediately.

•Critical - Conditions that affect the functionality of the SteelHead.

•Error - Conditions that probably affect the functionality of the SteelHead.

•Warning - Conditions that could affect the functionality of the SteelHead, such as authentication failures.

•Notice - Normal but significant conditions, such as a configuration change. This is the default setting.

•Info - Informational messages that provide general information about system operations.

•collectord - Application visibility NetFlow collector.

•cifs - CIFS optimization.

•cmcfc - SCC automatic registration utility.

•rgp - SCC connector, which handles SCC appliance communication.

•rgpd - SCC client daemon, the connection manager.

•cli - Command-line interface.

•mgmtd - Device control and management, which directs the entire device management system. It handles message passing between various management daemons, managing system configuration, and general application of system configuration on the hardware underneath through the hardware abstraction layer daemon (hald).

•http - HTTP optimization.

•hald - Hardware abstraction layer daemon, which handles access to the hardware.

•notes - Lotus Notes optimization.

•mapi - MAPI optimization.

•nfs - NFS optimization.

•pm - Process manager, which handles launching of internal system daemons and keeps them running.

•qosd - QoS scheduler and DPI engine.

•rscored - REST API core services.

•rstild - REST translation interface layer.

•sched - Process scheduler, which handles one-time scheduled events.

•statsd - Statistics collector, which handles queries, storage, and trending of system statistics.

•wdt - Watchdog timer, the motherboard watchdog daemon.

•webasd - web application process, which handles the web user interface.

•domain auth - Windows domain authentication.

•Emergency - Emergency, the system is unusable.

•Alert - Action must be taken immediately.

•Critical - Conditions that affect the functionality of the SteelHead.

•Error - Conditions that probably affect the functionality of the SteelHead.

•Warning - Conditions that could affect the functionality of the SteelHead, such authentication failures.

•Notice - Normal but significant conditions, such as a configuration change.

•Info - Informational messages that provide general information about system operations.

•is limited to 16 alphanumeric characters or fewer, or exactly 40 characters hexadecimal.

• can’t include spaces or pound signs (#)

• can’t be empty

• is case sensitive

• is limited to exactly 40 characters hexadecimal

• can’t include spaces or pound signs (#)

• can’t be empty

• is case sensitive

•MD5 - Specifies the Message-Digest 5 algorithm, a widely used cryptographic hash function with a 128-bit hash value. This is the default value.

•SHA - Specifies the Secure Hash Algorithm, a set of related cryptographic hash functions. SHA is considered to be the successor to MD5.

•No Auth - Doesn’t authenticate packets and doesn’t use privacy. This is the default setting.

•Auth - Authenticates packets but doesn’t use privacy.

•AuthPriv - Authenticates packets using AES 128 and DES to encrypt messages for privacy.

•MD5 - Specifies the Message-Digest 5 algorithm, a widely used cryptographic hash function with a 128-bit hash value. This is the default value.

•SHA - Specifies the Secure Hash Algorithm, a set of related cryptographic hash functions. SHA is considered to be the successor to MD5.

•v1 or v2c - Displays another drop-down menu. Select a security name.

•v3 (usm) - Displays another drop-down menu. Select a user.

•No Auth - Doesn’t authenticate packets and doesn’t use privacy. This is the default setting.

•Auth - Authenticates packets but doesn’t use privacy.

•AuthPriv - Authenticates packets using AES or DES to encrypt messages for privacy.