topic Re: Configuring SNMP for Cisco Firepower 2110 in Network Security

Configuring SNMP for Cisco Firepower 2110

B A — Tue, 12 Mar 2019 14:10:21 GMT

Hello.

I need to configure SNMP for Cisco Firepower 2110 to communicate with our Zabbix server.

How do I do this? I cannot find any way how to enter the Zabbix server's IP address to Cisco Firepower to make it working.

Thank you for your help.

Re: Configuring SNMP for Cisco Firepower 2110

phil.hydea — Thu, 13 Dec 2018 14:07:02 GMT

Hi

Are you using FDM or FMC to manage the 2110?

Cheers

Re: Configuring SNMP for Cisco Firepower 2110

B A — Fri, 14 Dec 2018 06:25:51 GMT

We use FMC.

Re: Configuring SNMP for Cisco Firepower 2110

Abheesh Kumar — Fri, 14 Dec 2018 06:45:43 GMT

Hi,
Go to Devices> Platform Sttings
Edit the policy and go to SNMP options to add snmp server.
For Intrusion events SNMP alerts go to Intrusion policy > edit> advanced option and check SNMP alerting is enabled.

Hope This Helps
Abheesh

Re: Configuring SNMP for Cisco Firepower 2110

B A — Fri, 14 Dec 2018 07:10:29 GMT

Thanks. I got there before already.

Where do I insert the IP of the Zabbix server?

Re: Configuring SNMP for Cisco Firepower 2110

Abheesh Kumar — Fri, 14 Dec 2018 07:17:22 GMT

Hi,

On platform settings SNMP click add., You will get the option to enter the snmp server details.

Hope This Helps

Abheesh

Re: Configuring SNMP for Cisco Firepower 2110

B A — Fri, 14 Dec 2018 07:57:22 GMT

Thanks. I configured it this way and still no joy. I added Zabbix's IP address to "IP Address" field.

Re: Configuring SNMP for Cisco Firepower 2110

Abheesh Kumar — Fri, 14 Dec 2018 07:58:31 GMT

Is SNMP is allowed in your firewall rules and also check the Zabbix server supports FMC/FTD

Hope This Helps
Abheesh

Re: Configuring SNMP for Cisco Firepower 2110

B A — Fri, 14 Dec 2018 08:13:14 GMT

Zabbix should support it.

Where do I check that firewall rules allow SNMP?

Thanks.

Re: Configuring SNMP for Cisco Firepower 2110

Abheesh Kumar — Fri, 14 Dec 2018 09:18:43 GMT

did you deploy the policy after adding the snmp server. I mean is there any other firewall in between your FTD and SNMP Server...?

Re: Configuring SNMP for Cisco Firepower 2110

phil.hydea — Fri, 14 Dec 2018 09:30:01 GMT

Have you tried running an snmpwalk against the IP address of your inside interface? then running a corresponding tcpdump on the FTD device to see if the connection is reaching through?

Also, you can run snmp polling against the mgmt interface. In the FMC > Devices > Device Management > Your Managed Device > SNMP tab. Simply add your v1/v2c community string or SNMPv3 user, then Deploy the changes.

Thanks

Re: Configuring SNMP for Cisco Firepower 2110

B A — Fri, 14 Dec 2018 09:52:55 GMT

Background:

192.168.1.10 - FMC

192.168.1.20 - Primary FW (inside IP address)

192.168.1.30 - Secondary (backup) FW (inside IP address)

What I did:

1. I added all three addresses above to Zabbix server.

2. I added a Zabbix server as SNMP server on FMC (192.168.1.10).

What happened:

Primary FW (192.168.1.20) got green on Zabbix server.

Why? Why not FMC?

How do I configure it for FMC and Secondary FW?

Thanks.

Re: Configuring SNMP for Cisco Firepower 2110

B A — Mon, 17 Dec 2018 07:47:04 GMT

Anybody?

Re: Configuring SNMP for Cisco Firepower 2110

phil.hydea — Mon, 17 Dec 2018 11:34:30 GMT

Hi,

I don't understand you're last message.

Firstly, have you successfully tested snmpwalk from your Zabbix server to the 3 devices? (FMC, FTD)?

Re: Configuring SNMP for Cisco Firepower 2110

B A — Mon, 17 Dec 2018 12:36:39 GMT

192.168.1.10 - FMC

snmpwalk failed from the Zabbix server

Zabbix can ping but says "Timeout while connecting to "IP_Address:161"

(SNMP Status in Zabbix frontend: red color)

192.168.1.20 - Primary FW

snmpwalk tested successfully from the Zabbix server

Zabbix can ping and says from a web interface that SNMP is ok

(SNMP Status in Zabbix frontend: green color)

192.168.1.30 - Secondary (backup)

snmpwalk tested successfully from the Zabbix server

Zabbix can ping and says from a web interface that SNMP is ok

(SNMP Status in Zabbix frontend: green color)

Re: Configuring SNMP for Cisco Firepower 2110

phil.hydea — Mon, 17 Dec 2018 13:20:20 GMT

So it looks like both FTD devices can be polled successfully by Zabbix.

The FMC SNMP settings need to be configured under System > Configuration > SNMP.

Configure the SNMP parameters, save then test.

let me know how you get on.

Kind regards

Phil

Re: Configuring SNMP for Cisco Firepower 2110

B A — Mon, 17 Dec 2018 13:42:13 GMT

I can only set the SNMP version and the community string. Nothing else. I cannot specify the Zabbix server as an SNMP server for our FirePower.

After I set this up, still no joy.

Re: Configuring SNMP for Cisco Firepower 2110

phil.hydea — Mon, 17 Dec 2018 14:21:30 GMT

Still in the configuration area of the FMC, within Access List, put the Zabbix IP address in for SNMP. Save, then re-try.

Re: Configuring SNMP for Cisco Firepower 2110

B A — Mon, 17 Dec 2018 14:31:20 GMT

Thanks. That was it.

Re: Configuring SNMP for Cisco Firepower 2110

kapydan88 — Sat, 04 Apr 2020 18:59:16 GMT

Hello.

What zabbix template was used for this device?