topic The support is pretty in Network Security

SNMP on FirePOWER

Isaiah — Tue, 12 Mar 2019 08:16:49 GMT

I am looking to monitor my FirePOWER Management Center and Services modules on the ASAs via SNMP. However, I do not see and have not been able to find any MIBs or objects related to anything specific to the FirePOWER services or platform. For example, I would really like to retrieve via SNMP the health status and and any alarms on the FMC. Is this possible or is it not implemented? Are there any custom MIBs for these platforms?

The support is pretty

Marvin Rhoads — Thu, 15 Sep 2016 21:23:58 GMT

The support is pretty rudimentary.

Here's the relevant section from the Configuration Guide:

You can enable Simple Network Management Protocol (SNMP) polling for Firepower Management Centers and Classic managed devices. This feature supports use of versions 1, 2, and 3 of the SNMP protocol.

This feature allows access to:

• The standard management information base (MIB), which includes system details such as contact,
administrative, location, service information, IP addressing and routing information, and transmission
protocol usage statistics
• Additional MIBs for 7000 and 8000 Series managed devices that include statistics on traffic passing
through physical interfaces, logical interfaces, virtual interfaces, ARP, NDP, virtual bridges, and virtual routers

That is unfortunate. I was

Isaiah — Thu, 15 Sep 2016 21:32:46 GMT

That is unfortunate. I was hoping there was something more. That information and those MIBs are all so generic as to not really be useful. Thank you though.

- I wish sent the snmp alerts for the port 161 instead port 162

ricardo_puga — Tue, 17 Oct 2017 19:14:13 GMT

- I wish sent the snmp alerts for the port 161 instead port 162

was configured alerts of the system health for snmp, but when the system sends the alerts those alerts go to port 162 snmptrap udp, but the server is waiting the alerts for the port 161 snmppolling, i can 't configure the alerts for than it send for the port 161 snmppolling.

the question is:
the firepower can it send alerts for snmppolling for port 161 udp ?

i attach the image the connection you can see the destination port is 162 snmptrap and not snmppolling 161

Best Regards

Ricardo Puga

Re: The support is pretty

ricardo_puga — Tue, 17 Oct 2017 19:16:24 GMT

Hi Marvin

- I wish sent the snmp alerts for the port 161 instead port 162

the question is:
the firepower can it send alerts for snmppolling for port 161 udp ?

i attach the image the connection you can see the destination port is 162 snmptrap and not snmppolling 161

Re: SNMP on FirePOWER

toddlammle — Thu, 07 Dec 2017 18:44:14 GMT

hey guys, this is all fixed in FTD...you configure a whole lot of SNMP stuff in the platform settings.

so, maybe this is a good reason to upgrade to FTD??

Lammle.com/firepower

Re: SNMP on FirePOWER

sysko — Tue, 21 Feb 2023 12:57:15 GMT

I would not upgrade to the FTD.