Cisco FTD SNMP Monitoring

[noxiosus]

Hi guys,

As I see, there are two options to monitor Cisco FTD - via direct SNMP polls/traps, or via health policy on Cisco FMC.

As it is stated here https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/white-paper-c11-741739.html

second option is more preferable, but I don't quite understand why.

So what is the difference?

[Marvin Rhoads · Accepted solution]

Because the FMC health monitor provides a much richer and more accurate view of what's going on with the managed FTD devices. That's even more true with 7.0 - it has several times the amount of information you can get from SNMP.

The implementation of SNMP on FTD has always been an afterthought and not a very complete source of information (as well as being difficult to configure properly).