Back to All Scenarios
PASSEDcache / firewall_block

KeyDB 6.3 Blocked by Firewall Rule Change on Amazon Linux 2023

A firewall rule change is blocking traffic to KeyDB 6.3. Legitimate connections being denied.

Pattern
FIREWALL_RULE_BLOCK
Severity
HIGH
Confidence
68%
Remediation
Auto-Heal

Test Results

MetricExpectedActualResult
Pattern RecognitionFIREWALL_RULE_BLOCKFIREWALL_RULE_BLOCK
Severity AssessmentHIGHHIGH
Incident CorrelationN/ANone
Cascade EscalationN/ANo
RemediationAuto-Heal — Corax resolves autonomously

Scenario Conditions

Amazon Linux 2023. KeyDB 6.3 port 6379 blocked by new firewall rule. Rule added during maintenance window. All inbound traffic to KeyDB 6.3 denied.

Injected Error Messages (1)

KeyDB 6.3 blocked by firewall on Amazon Linux 2023 — firewall block on port 6379, deny rule added during maintenance, all inbound connections denied, blocked by policy, 187 users/connections affected

Neural Engine Root Cause Analysis

Firewall rule block detected — legitimate traffic is being denied by a firewall ACL or security policy. This may be caused by an overly restrictive rule, a recent policy change, or an implicit deny catching traffic that should be permitted. Blocked traffic can prevent application connectivity, break integrations, and disrupt business operations.

Remediation Plan

1. Identify the specific firewall rule or ACL entry causing the block from the firewall logs (note rule ID, source, destination, port). 2. Verify whether the traffic should be permitted — confirm with the application owner or network documentation. 3. If the block is a false positive, create or modify a firewall rule to allow the traffic with the principle of least privilege. 4. Check for recent firewall policy changes that may have inadvertently blocked the traffic. 5. Test the fix by re-initiating the blocked connection and verifying it passes through the firewall.
Tested: 2026-04-02Monitors: 1 | Incidents: 1Test ID: cmnhnw3y103q2lijg23aknchg