Configuring SNMP for Cisco Firepower 2110

[B A]

Hello.

I need to configure SNMP for Cisco Firepower 2110 to communicate with our Zabbix server.

How do I do this? I cannot find any way how to enter the Zabbix server's IP address to Cisco Firepower to make it working.

Thank you for your help.

[phil.hydea]

Hi

Are you using FDM or FMC to manage the 2110?

Cheers

[B A]

We use FMC.

[Abheesh Kumar]

Hi,
Go to Devices> Platform Sttings
Edit the policy and go to SNMP options to add snmp server.
For Intrusion events SNMP alerts go to Intrusion policy > edit> advanced option and check SNMP alerting is enabled.

Hope This Helps
Abheesh

[B A]

Thanks. I got there before already.

Where do I insert the IP of the Zabbix server?

[Abheesh Kumar]

Hi,

On platform settings SNMP click add., You will get the option to enter the snmp server details.

Hope This Helps

Abheesh

[B A]

Thanks. I configured it this way and still no joy. I added Zabbix's IP address to "IP Address" field.

[Abheesh Kumar]

Is SNMP is allowed in your firewall rules and also check the Zabbix server supports FMC/FTD

Hope This Helps
Abheesh

[B A]

Zabbix should support it.

Where do I check that firewall rules allow SNMP?

Thanks.

[Abheesh Kumar]

did you deploy the policy after adding the snmp server. I mean is there any other firewall in between your FTD and SNMP Server...?

[phil.hydea]

Hi

Have you tried running an snmpwalk against the IP address of your inside interface? then running a corresponding tcpdump on the FTD device to see if the connection is reaching through?

Also, you can run snmp polling against the mgmt interface. In the FMC > Devices > Device Management > Your Managed Device > SNMP tab. Simply add your v1/v2c community string or SNMPv3 user, then Deploy the changes.

Thanks

[B A]

Background:

192.168.1.10 - FMC

192.168.1.20 - Primary FW (inside IP address)

192.168.1.30 - Secondary (backup) FW (inside IP address)

What I did:

1. I added all three addresses above to Zabbix server.

2. I added a Zabbix server as SNMP server on FMC (192.168.1.10).

What happened:

Primary FW (192.168.1.20) got green on Zabbix server.

Why? Why not FMC?

How do I configure it for FMC and Secondary FW?

Thanks.

[B A]

Anybody?

[phil.hydea]

Hi,

I don't understand you're last message.

Firstly, have you successfully tested snmpwalk from your Zabbix server to the 3 devices? (FMC, FTD)?

[B A]

192.168.1.10 - FMC

snmpwalk failed from the Zabbix server

Zabbix can ping but says "Timeout while connecting to "IP_Address:161"

(SNMP Status in Zabbix frontend: red color)

192.168.1.20 - Primary FW

snmpwalk tested successfully from the Zabbix server

Zabbix can ping and says from a web interface that SNMP is ok

(SNMP Status in Zabbix frontend: green color)

192.168.1.30 - Secondary (backup)

snmpwalk tested successfully from the Zabbix server

Zabbix can ping and says from a web interface that SNMP is ok

(SNMP Status in Zabbix frontend: green color)