Description

Applicable on the ASA and PIX devices. Monitors the hardware status, buffer usage and traffic classified by protocol.

Prerequisites

SNMP should be enabled in end device and device should support CISCO-FIREWALL-MIB OIDs and SNMP credentials should be attached against the device in portal.

Metric Parameters

Metric Parameters
ParameterDescription
Frequency
  • Frequency is the interval in which you want to probe and collect metric data from the target device/resource
  • Frequency is defined in minutes (min).
    • Warning ThresholdIf the metric value satisfies the condition defined along with Warning Threshold value, then a notification is sent to the user.
    Critical ThresholdIf the metric value satisfies the condition defined along with Critical Threshold value, then a notification is sent to the user.
    AlertThe alert value can be set to either Yes or No. If it is Yes, then an alert message is sent to the user.

    Metrics

    fw.cisco.buffer.usage.4byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.4.8
    ExpressionNULL
    DescriptionCurrent number of available 4 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.4.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 4 Byte Blocks

    Number of Available 4 Byte Blocks

    fw.cisco.buffer.usage.80byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.80.8
    ExpressionNULL
    DescriptionCurrent number of available 80 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.80.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 80 Byte Blocks

    Number of Available 80 Byte Blocks

    fw.cisco.buffer.usage.256byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.256.8
    ExpressionNULL
    DescriptionCurrent number of available 256 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.256.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 256 Byte Blocks

    Number of Available 256 Byte Blocks

    fw.cisco.buffer.usage.1550byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.1550.8
    ExpressionNULL
    DescriptionCurrent number of available 1550 byte blocks.
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 1550 Byte Blocks

    Number of Available 1550 Byte Blocks

    fw.cisco.buffer.usage.2048byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.2048.8
    ExpressionNULL
    DescriptionCurrent number of available 2048 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.2048.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 2048 Byte Blocks

    Number of Available 2048 Byte Blocks

    fw.cisco.buffer.usage.2560byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.2560.8
    ExpressionNULL
    DescriptionCurrent number of available 2560 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.2560.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 2560 Byte Blocks

    Number of Available 2560 Byte Blocks

    fw.cisco.buffer.usage.4096byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.4096.8
    ExpressionNULL
    DescriptionCurrent number of available 4096 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.4096.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 4096 Byte Blocks

    Number of Available 4096 Byte Blocks

    fw.cisco.buffer.usage.8192byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.8192.8
    ExpressionNULL
    DescriptionCurrent number of available 8192 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.8192.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 8192 Byte Blocks

    Number of Available 8192 Byte Blocks

    fw.cisco.buffer.usage.16384byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.16384.8
    ExpressionNULL
    DescriptionCurrent number of available 16384 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.16384.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 16384 Byte Blocks

    Number of Available 16384 Byte Blocks

    fw.cisco.buffer.usage.65536byte

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.65536.8
    ExpressionNULL
    DescriptionCurrent number of available 65536 byte blocks. [OID: 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4.65536.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Buffer Usage
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold20-4294967295
    Warning Repeat Count11-12
    Critical OperatorLESS_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold10-4294967295
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Number of Available 65536 Byte Blocks

    Number of Available 65536 Byte Blocks

    fw.cisco.protocol.traffic.current.icmp

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.37.6
    ExpressionNULL
    DescriptionCurrent ICMP Connections
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Protocol Based Traffic - Current
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Note: As Alert is not enabled on the above metric, the fields are left blank.

    Sample Output

    No graph

    fw.cisco.protocol.traffic.current.tcp

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.38.6
    ExpressionNULL
    DescriptionCurrent TCP Connections
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Protocol Based Traffic - Current
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Note: As Alert is not enabled on the above metric, the fields are left blank.

    Sample Output

    No graph

    fw.cisco.protocol.traffic.current.udp

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.39.6
    ExpressionNULL
    DescriptionCurrent UDP connections
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Protocol Based Traffic - Current
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Note: As Alert is not enabled on the above metric, the fields are left blank.

    Sample Output

    No graph

    fw.cisco.protocol.traffic.current.ip

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6
    ExpressionNULL
    DescriptionCurrent IP connections
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Protocol Based Traffic - Current
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Note: As Alert is not enabled on the above metric, the fields are left blank.

    Sample Output

    Current IP connections

    Current IP connections

    fw.cisco.hardware.status

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.9.9.147.1.2.1.1.1.3, 1.3.6.1.4.1.9.9.147.1.2.1.1.1.4
    ExpressioncfwHardwareStatusValue
    DescriptionProvides firewall hardware current status and detailed information about the status
    [OIDs: 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2, 1.3.6.1.4.1.9.9.147.1.2.1.1.1.4, 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NameCisco FW - Hardware Status
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency51 – 1440 (mins)
    FiltercfwHardwareStatusDetail
    Not in string list
    not Configured,Failover Off
    Warning OperatorIN_LISTEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold6,7,81-10
    Warning Repeat Count11-12
    Critical OperatorIN_LISTEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold3,4,51-10
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)NONEYes/No

    Sample Output

    No graph