OverviewThe Exinda uses the Mgmt Interface (usually Eth1) as the subnet to compare internal and external packets to. So based upon the fact that the mgmt interface is supposed to be connected to the internal network, the Exinda does the following:
Supposing your Exinda Mgmt interface is set to 172.16.0.100/16
1. It counts how many packets coming from the internal network (LAN Interface) match the exinda Management subnet (172.16.0.0/16). It assigns that value to a variable A.
2. It counts how many packets coming from the external network (WAN Interface) match the exinda mgmt subnet (172.16.0.0/16). It assigns that value to a variable B.
3. It compares both values. If B is greater than A the alarm is triggered.
So if your Exinda mgmt interface is connected to a subnet that is mainly located after the WAN side of the Exinda, this alarm is bound to be triggered, so the best option here is to disable it.
You can go to System-->Setup-->Alerts, and disable Bridge Directions Alerts.