Configs/Templates/Templates Firewall/FORTINET-Session.xml

883 lines
36 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<zabbix_export>
<version>3.0</version>
<date>2018-05-04T09:25:25Z</date>
<groups>
<group>
<name>Templates Firewall</name>
</group>
</groups>
<templates>
<template>
<template>FORTINET-Session</template>
<name>FORTINET-Session</name>
<description/>
<groups>
<group>
<name>Templates Firewall</name>
</group>
</groups>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<items>
<item>
<name>Counts of accept queue full</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.6.0</snmp_oid>
<key>fgSIAdvSesAcceptQFCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>Number of new sessions which have collision</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.3.0</snmp_oid>
<key>fgSIAdvSesClashCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>Ephemeral sessions: current number</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.1.0</snmp_oid>
<key>fgSIAdvSesEphemeralCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>Ephemeral sessions: limit number</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.2.0</snmp_oid>
<key>fgSIAdvSesEphemeralLimit</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>Number of current expectation sessions</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.4.0</snmp_oid>
<key>fgSIAdvSesExpCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>Counts of direct requests to FortiGate local stack</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.7.0</snmp_oid>
<key>fgSIAdvSesNoListenerCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>Counts of sync queue full</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.6.2.5.0</snmp_oid>
<key>fgSIAdvSesSyncQFCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv6 Active sessions</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.15.0</snmp_oid>
<key>fgSysSes6Count</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv6 Session Setup Rate over 1 min</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.16.0</snmp_oid>
<key>fgSysSes6Rate1</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv6 Session Setup Rate over 10 mins</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.17.0</snmp_oid>
<key>fgSysSes6Rate10</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv6 Session Setup Rate over 30 mins</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.18.0</snmp_oid>
<key>fgSysSes6Rate30</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv6 Session Setup Rate over 60 mins</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.18.0</snmp_oid>
<key>fgSysSes6Rate60</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv4 Active sessions</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.8.0</snmp_oid>
<key>fgSysSesCount</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units/>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv4 Session Setup Rate over 1 min</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.11.0</snmp_oid>
<key>fgSysSesRate1</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv4 Session Setup Rate over 10 mins</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.12.0</snmp_oid>
<key>fgSysSesRate10</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv4 Session Setup Rate over 30 mins</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.13.0</snmp_oid>
<key>fgSysSesRate30</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
<item>
<name>IPv4 Session Setup Rate over 60 mins</name>
<type>4</type>
<snmp_community>{$SNMP_FW_COMMUNITY}</snmp_community>
<multiplier>0</multiplier>
<snmp_oid>.1.3.6.1.4.1.12356.101.4.1.14.0</snmp_oid>
<key>fgSysSesRate60</key>
<delay>300</delay>
<history>7</history>
<trends>365</trends>
<status>0</status>
<value_type>3</value_type>
<allowed_hosts/>
<units>CPS</units>
<delta>0</delta>
<snmpv3_contextname/>
<snmpv3_securityname/>
<snmpv3_securitylevel>0</snmpv3_securitylevel>
<snmpv3_authprotocol>0</snmpv3_authprotocol>
<snmpv3_authpassphrase/>
<snmpv3_privprotocol>0</snmpv3_privprotocol>
<snmpv3_privpassphrase/>
<formula>1</formula>
<delay_flex/>
<params/>
<ipmi_sensor/>
<data_type>0</data_type>
<authtype>0</authtype>
<username/>
<password/>
<publickey/>
<privatekey/>
<port/>
<description/>
<inventory_link>0</inventory_link>
<applications>
<application>
<name>Session</name>
</application>
</applications>
<valuemap/>
<logtimefmt/>
</item>
</items>
<discovery_rules/>
<macros/>
<templates/>
<screens/>
</template>
</templates>
<triggers>
<trigger>
<expression>({FORTINET-Session:fgSysSesCount.last(0)}-{FORTINET-Session:fgSysSesCount.avg(86400)})&gt;0.2 * {FORTINET-Session:fgSysSesCount.last(0)} and ({FORTINET-Session:fgSysSesCount.last(0)}-{FORTINET-Session:fgSysSesCount.avg(86400)})&lt;0.3 * {FORTINET-Session:fgSysSesCount.last(0)}</expression>
<name>An increase of 20% of ipv4 active sessions was detected</name>
<url/>
<status>0</status>
<priority>3</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
<trigger>
<expression>({FORTINET-Session:fgSysSes6Count.last(0)}-{FORTINET-Session:fgSysSes6Count.avg(86400)})&gt;0.2 * {FORTINET-Session:fgSysSes6Count.last(0)} and ({FORTINET-Session:fgSysSes6Count.last(0)}-{FORTINET-Session:fgSysSes6Count.avg(86400)})&lt;0.3 * {FORTINET-Session:fgSysSes6Count.last(0)}</expression>
<name>An increase of 20% of ipv6 active sessions was detected</name>
<url/>
<status>0</status>
<priority>3</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
<trigger>
<expression>({FORTINET-Session:fgSysSesCount.last(0)}-{FORTINET-Session:fgSysSesCount.avg(86400)})&gt;0.3 * {FORTINET-Session:fgSysSesCount.last(0)} and ({FORTINET-Session:fgSysSesCount.last(0)}-{FORTINET-Session:fgSysSesCount.avg(86400)})&lt;0.4 * {FORTINET-Session:fgSysSesCount.last(0)}</expression>
<name>An increase of 30% of ipv4 active sessions was detected</name>
<url/>
<status>0</status>
<priority>4</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
<trigger>
<expression>({FORTINET-Session:fgSysSes6Count.last(0)}-{FORTINET-Session:fgSysSes6Count.avg(86400)})&gt;0.3 * {FORTINET-Session:fgSysSes6Count.last(0)} and ({FORTINET-Session:fgSysSes6Count.last(0)}-{FORTINET-Session:fgSysSes6Count.avg(86400)})&lt;0.4 * {FORTINET-Session:fgSysSes6Count.last(0)}</expression>
<name>An increase of 30% of ipv6 active sessions was detected</name>
<url/>
<status>0</status>
<priority>4</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
<trigger>
<expression>({FORTINET-Session:fgSysSesCount.last(0)}-{FORTINET-Session:fgSysSesCount.avg(86400)})&gt;0.4 * {FORTINET-Session:fgSysSesCount.last(0)}</expression>
<name>An increase of 40% of ipv4 active sessions was detected</name>
<url/>
<status>0</status>
<priority>5</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
<trigger>
<expression>({FORTINET-Session:fgSysSes6Count.last(0)}-{FORTINET-Session:fgSysSes6Count.avg(86400)})&gt;0.4 * {FORTINET-Session:fgSysSes6Count.last(0)}</expression>
<name>An increase of 40% of ipv6 active sessions was detected</name>
<url/>
<status>0</status>
<priority>5</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
<trigger>
<expression>{FORTINET-Session:fgSIAdvSesEphemeralCount.last(0)}&gt;{FORTINET-Session:fgSIAdvSesEphemeralLimit.last(0)}</expression>
<name>Number of ephemeral sessions exceeded the limit</name>
<url/>
<status>0</status>
<priority>3</priority>
<description/>
<type>0</type>
<dependencies/>
</trigger>
</triggers>
<graphs>
<graph>
<name>Active Sessions</name>
<width>900</width>
<height>200</height>
<yaxismin>0.0000</yaxismin>
<yaxismax>100.0000</yaxismax>
<show_work_period>1</show_work_period>
<show_triggers>1</show_triggers>
<type>0</type>
<show_legend>1</show_legend>
<show_3d>0</show_3d>
<percent_left>0.0000</percent_left>
<percent_right>0.0000</percent_right>
<ymin_type_1>0</ymin_type_1>
<ymax_type_1>0</ymax_type_1>
<ymin_item_1>0</ymin_item_1>
<ymax_item_1>0</ymax_item_1>
<graph_items>
<graph_item>
<sortorder>0</sortorder>
<drawtype>0</drawtype>
<color>C80000</color>
<yaxisside>0</yaxisside>
<calc_fnc>2</calc_fnc>
<type>0</type>
<item>
<host>FORTINET-Session</host>
<key>fgSysSesCount</key>
</item>
</graph_item>
<graph_item>
<sortorder>1</sortorder>
<drawtype>0</drawtype>
<color>00C800</color>
<yaxisside>0</yaxisside>
<calc_fnc>2</calc_fnc>
<type>0</type>
<item>
<host>FORTINET-Session</host>
<key>fgSysSes6Count</key>
</item>
</graph_item>
</graph_items>
</graph>
</graphs>
</zabbix_export>