when external interface addres attack(kind of scan) ha port down

[plink_tec]

hi i'm security engineer in Republic of Korea

I had a disability a few days ago

There was some network scanning, but not enough to have an impact

and every scanning was blocked

But after that happened, ha1 port downed

It caused a disability The situation repeated for 3minutes

I don't understand external interface addres was attaked

even all traffic blocked

I wonder why the ha1 port is down

Thanks for all replies and have a nice day

[Anonymous]

Hello @plink_tec,

            Thank you for using the Community Forum. The HA port is for the high availability purposes. If the secondary node that connects to the primary over the ha port goes down then the ha port also shows down. Do you know if the secondary device in your network rebooted or went offline for any specific reason? From the logs it only says that the member was dead.

Hope to hear back from you soon.

Thanks and regards,