Exclude health policy modules on an appliance

Excluding health policy modules is useful when certain modules produce irrelevant or temporary health alerts, which you do not want to affect the overall appliance status. Exclusion settings indicate the number of modules excluded from health monitoring.

Note

Excluding health modules for individual interfaces is not supported on devices operating in transparent mode.

Tip

Make sure that you keep track of individually excluded modules so you can reactivate them when you need them. You may miss essential warning or critical messages if you accidentally leave a module disabled.

Procedure

Step 1

Choose Troubleshooting > + Show more > Health > Exclude.

Step 2

Click Edit (edit icon) next to the Firewall Threat Defense device you want to modify.

Step 3

In the Exclude Health Modules dialog box, by default, all the modules of the device are excluded from health monitoring.

Certain modules are applicable to specific device only; for more information, see Health modules.

Step 4

To choose modules to be excluded from health monitoring, click the Enable Module Level Exclusion link.

The Exclude Health Modules dialog box displays all the modules of the device. The modules that are not applicable for the associated health policies are disabled by default. To exclude a module, perform these steps:

  1. Click the Slider (slider icon) button next to the desired module.

  2. To specify the duration of the exclusion for the selected modules, from the Exclude Period drop-down list, select the duration.

Step 5

(Optional) To stop receiving health status updates for physical interfaces and instead focus on the health status of their subinterfaces, you can disable health monitoring for the physical interfaces while continuing to monitor and receive health alerts for the subinterfaces.

  1. If not already enabled, click the toggle button next to the Interface statistics module.

  2. From the Exclude Period drop-down list, choose a duration for which the health status of the physical interfaces is not required.

  3. Click the Exclude specific interfaces radio button.

  4. Check the check boxes next to the physical interfaces that you want to exclude.

  5. Selecting a physical interface will automatically exclude both the physical interface and its subinterfaces. Therefore, uncheck the Subinterfaces check box next to the corresponding physical interface to continue receiving health alerts for the subinterfaces.

Step 6

If you select an Exclude Period other than Permanent, for your exclusion configuration, you can choose to automatically delete the configuration when it expires. To enable this setting, check the Auto-delete expired configurations check box.

Step 7

Click OK.

Step 8

Click Apply.