topic Re: firepower 1140 zabbix issue in Network Security

firepower 1140 zabbix issue

kapydan88 — Mon, 06 Apr 2020 07:14:32 GMT

Hello for everyboy.

Have some issue with adding this device in zabbix monitoring.

According config guide for FMC for firepower 1000 series i need to create snmp settings

161 port for zabbix

community

system admin name - admin (admin name for FMC or Fp1140)

location - mai_dc

and create snmp traps configuration with 162 port and same community, like in previous screen

In my case i can see this device in monitoring, but i cant see any events for it and traffic on ports.

In zabbix i used this template - Template Net Cisco IOS SNMPv2.

Re: firepower 1140 zabbix issue

Francesco Molino — Mon, 06 Apr 2020 02:38:27 GMT

Hi

You need to assign an ip address to diagnostic interface which is the one replying for snmp.
There're multiple posts regarding this discussion. Take a look here:
https://community.cisco.com/t5/network-security/snmp-to-the-ftd-managment-interface/td-p/3049834

Re: firepower 1140 zabbix issue

Marvin Rhoads — Mon, 06 Apr 2020 06:11:44 GMT

In addition to what @Francesco Molino noted, also please use the Cisco ASA template - not the IOS one.

Re: firepower 1140 zabbix issue

kapydan88 — Mon, 06 Apr 2020 07:23:49 GMT

Hello,

Yes, i added in zabbix ip management interface, not lina. If i understood correctly, all management on this series of devices implemented via management interface ( marked <->).

> expert
**************************************************************
NOTICE - Shell access will be deprecated in future releases
and will be replaced with a separate expert mode CLI.
**************************************************************
admin@firepower-vpn:~$ ifconfig

...

management0 Link encap:Ethernet HWaddr 10:b3:d5:9c:c7:00
inet addr:1.1.1.10 Bcast:1.1.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:595598 errors:0 dropped:0 overruns:0 frame:0
TX packets:416948 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:197932618 (188.7 MiB) TX bytes:63438478 (60.4 MiB)

...

admin@firepower-vpn:~$ exit
logout
>

Re: firepower 1140 zabbix issue

kapydan88 — Mon, 06 Apr 2020 08:09:15 GMT

Can i use this template?

https://share.zabbix.com/network_devices/cisco/cisco-asa-discovery

https://www.geekshangout.com/zabbix-monitoring-a-cisco-asa-firewall/

Re: firepower 1140 zabbix issue

Francesco Molino — Tue, 07 Apr 2020 02:13:36 GMT

Yes ASA and FTD are quite the same on some aspects. You can start with those

Re: firepower 1140 zabbix issue

kapydan88 — Tue, 06 Apr 2021 15:45:13 GMT

In the end, everything was done without problems - from firepower side see screen, from zabbix side i added internal line interface firepower 1140. It works fine, we tried it with different templates - for asa and for another cisco devices (like router or switch)