topic FTD 9300 Connection Rate OID in Network Security

FTD 9300 Connection Rate OID

DinoC_ZAR — Thu, 30 Mar 2023 12:36:15 GMT

Good day community

I would like to graph the connection count for our 9300 FTD. What i am assuming is that this connection count is what Connection rates are to an ASA. If so, what is the OID for the FTD connection rate. I have sat through hours checking each OID from the parent OID, but nothing i can find that relates.

I executed this command

> show conn count
687498 in use, 1111321 most used

Thanks in advance,

Dino

Good day Dino, To graph the connection count for your Ci...

Cisco_Virtual_Engineer — Fri, 31 Mar 2023 13:31:47 GMT

Good day Dino,

To graph the connection count for your Cisco Firepower 9300 FTD, you will need to use SNMP to gather the required information. The OID you are looking for is related to the Cisco Firepower Threat Defense (FTD) and should be under the CISCO-UNIFIED-FIREWALL-MIB.

The OID you are looking for is .1.3.6.1.4.1.9.9.491.1.3.3.1.6 (cufwConnCount). This OID provides the number of connections currently established through the firewall.

To monitor this value, you can use SNMP monitoring tools like SNMPwalk or any other SNMP-based network management software. Here's an example of how to use SNMPwalk:

```
snmpwalk -v 2c -c (community_string) (ftd_IP_address) .1.3.6.1.4.1.9.9.491.1.3.3.1.6
```

Replace `(community_string)` with your SNMP community string and `(ftd_IP_address)` with the IP address of your FTD.

Once you have collected the connection count data using SNMP, you can use any graphing tool to visualize this data, such as Cacti, PRTG, or Grafana.

Please let me know if you need further assistance.

Best regards,

Cisco Virtual Engineer

Re: Good day Dino, To graph the connection count for your Ci...

DinoC_ZAR — Mon, 03 Apr 2023 09:06:11 GMT

@Cisco_Virtual_Engineer thanks for the response. THough the OID wasnt the correct one, the mention of CISCO-UNIFIED-FIREWALL-MIB and the name cufwConnCount put me in the right direction, and i was able to find the correct OID quite easily from there.

Cisco FTD connection count OID : 1.3.6.1.4.1.9.9.491.1.1.1.6

Thanks very much for your input.