topic ASA Context Failover Alerting in Network Security

ASA Context Failover Alerting

DanielBostock — Mon, 06 Jul 2020 00:51:11 GMT

Hi,

I am just wondering if it is possible to monitor the failover of an ASA in multiple context mode, and even more finely tune that monitoring to include specific contexts failing over to a standby ASA? I am thinking syslog is probably the most likely source for this event alerting, but I am having a hard time getting through the documentation and googling to find out specifically how to do this.

Thanks appreciate any and all help in advance.

Thanks,

Daniel.

Re: ASA Context Failover Alerting

Marvin Rhoads — Mon, 06 Jul 2020 03:34:18 GMT

Yes you could trigger an action in your NMS based on receipt of specific syslog messages. There are quite a few related to failover. For instance:

https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/syslogs1.html#con_8584490

The most likely ones you would see are 104001 and 104002.

Re: ASA Context Failover Alerting

DanielBostock — Tue, 07 Jul 2020 05:25:58 GMT

@Marvin Rhoads- Thanks for the information, I have reviewed that link and have ensured the logging is now turned on (well not filtered!) and is going the correct NMS and this has resolved the issue.

Thanks,

Daniel.