ASA Failover trap

[lkadlik]

Hi,

I have two asa's and would like to set up a trap in Orion to send an email when the pair failsover.  Could someone please tell me what the trap would look like or what I should be trapping on?

Thank you.

[Panos Kampanakis]

Unfortunately there are no traps for failover events.

But you can send syslog traps and look for trap that has syslog ASA-1-104002 in it.

I hope it helps.

PK

[lkadlik]

How would I set up syslog traps to send email notifications?

Thank  you for all of your help.

[Panos Kampanakis · Accepted solution]

I meant command "snmp-server enable traps [all | syslog".

But if you want to receive an email for every failover event you don't need to use SNMP. You can send the syslog id I mentioned as an email as shown here http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/monitor_syslog.html#wp1064823

Please mark this thread as solved if it solves your issue so that others can benefit in the future.

Rgs,

PK