topic FWSM Active/Active Failover Logging in Network Security

FWSM Active/Active Failover Logging

Andy Robinson — Tue, 12 Mar 2019 00:35:30 GMT

Hi,

Does anyone know if during a failover syslog logs or SNMP alerts should be generated on individual FWSM contexts. I have looked through syslogs from the time a failover has occured and I have seen no mention of any failover. Our SNMP management software doesn't report anything either. At the time all contexts other than the admin context were configured for syslog. The admin context was only configured for SNMP, which has now been corrected. Until we see another failover event though I cannot confirm if this has made any difference.

The main driver for this is that in the event of a failover our NOC does not see a problem. They poll the devices via IP, so unless we were to physically lose a module we do not know a failover has occured as both the active and standby IP addresses are available.

Thanks

Andy

FWSM Active/Active Failover Logging

Jennifer Halim — Mon, 10 Dec 2012 16:16:45 GMT

No, syslog for failover will be generated from the admin context because failover configuration is actually configured on system context and system context information will be relayed via admin context.

FWSM Active/Active Failover Logging

Andy Robinson — Mon, 10 Dec 2012 16:46:33 GMT

Hi Jennifer, thank you for the response, I was having difficulty finding documentation to confirm if this was the case

Thanks again.

Andy

FWSM Active/Active Failover Logging

Jennifer Halim — Tue, 11 Dec 2012 05:15:31 GMT

Here is the documentation for your reference:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm40/configuration/guide/monitr_f.html#wp1098808

Hope that helps.

FWSM Active/Active Failover Logging

Andy Robinson — Tue, 11 Dec 2012 08:46:16 GMT

Thank you