How to monitor connections dropped and rejected on the PIX/ASA firewall?

[fjmendonca]

I need to monitor OID SNMP of the connections dropped and rejected on the PIX and ASA firewall. Is it possible?

If it is, which OID SNMP should I to monitor?

[Farrukh Haroon]

Do you just want the count (number)?

Syslog would be the way of choice to get insight into these connections and not SNMP. I don't think any SNMP MIB is supported offering this functionality.

Regards

Farrukh

[fjmendonca]

Yes, I need only the count (number) of connections dropped and rejected.

[Panos Kampanakis · Accepted solution]

Syslogs and Netflow (introduced in 8.2 version) are your options.

No MIB can give you the conn numbers.

PK

[fjmendonca]

Ok PK, thank you very much.

Fabiano