topic monitoring tool for ASA in Network Security

monitoring tool for ASA

mohammedrashid459 — Tue, 12 Mar 2019 08:41:01 GMT

Dear Experts,

Can anyone please let me know what's the best monitoring tool for Cisco ASA firewall.

I know we can monitor it through ASDM, but are there any other alternatives for ASDM.

Also I want to know the recommended monitoring tool for Cisco routers and switches.

Any help would be really appreciable.

Thanks

Mohammed

In my opinion there is no

Oliver Kaiser — Tue, 20 Dec 2016 22:33:33 GMT

In my opinion there is no "best" tool to monitore Cisco ASA. When it comes to monitoring there are many different things we are able to monitor and the reasons for doing so vary depending on what we want to achive (system status, performance, logs, traffic analysis, etc.).

If you are heavy into Cisco, Cisco Prime might be a good fit to monitor system metrics like hardware, cpu, memory, interface load etc. of ASA and IOS devices.

In case you are interested into traffic analysis a netflow tool like Scrutinizer might be the right fit.

If you want to correlate events and do log analysis something like Splunk or Elastic Stack might be the tool you are looking for

In case you are looking for monitoring tools from the open source space Nagios / Icinga2 would make sense to monitor metrics via polling snmp data or alerting on snmp traps.

If you want to know anything specific let me know.

Hi Kaisero,

mohammedrashid459 — Wed, 21 Dec 2016 10:23:29 GMT

Hi Kaisero,

Thank you very much for letting me know all these things.

Can you also please let me know, what causes the high bandwidth utilisation and memory in real time, also can you please let me know how to overcome these things if encountered.

How about the latency and jitter, how do people overcome these things without having the impact on the production network.

Thanks very much.

Mohammed

Hi Mohammed,

Oliver Kaiser — Sun, 01 Jan 2017 20:55:32 GMT

Hi Mohammed,

As for what causes high bandwidth utilisation it really depends on your traffic pattern. Might be related to user traffic, backup traffic, etc. etc. High memory usage is experienced if the firewall has to handle high traffic loads and traffic must be located for various features (e.g. nat table, connection table, etc.) or it might be a memory leak that is caused by a buggy feature implementation resulting in your memory usage constantly growing.

To overcome issues like that you either have to implement QoS in your environment to shape traffic or buy a larger box to handle the amount of traffic. Blocking undesired traffic might also be a solution depending on the issue - different issues call for different solutions based on the cause.

Let me know if that answers your questions

regards

Oliver

Re: monitoring tool for ASA

watchthisfirewall — Wed, 09 Apr 2025 09:10:16 GMT

Hi,

You can find Watch-This-Firewall on GitHub. It's a powerful assessment tool for Cisco ASA firewalls:
https://github.com/WatchThisFirewall/WTF.v1
It provides a comprehensive analysis of your firewall and also recommends remediation steps.