Need help related to firewall monitoring

[prasadele]

Hello guys,

I am new to network monitoring and using snmp based monitoring for asa 5506x ,5524 etc. Could you please guide me what are other critical performance parameters which should be monitored apart from cpu,memory, and hardware monitoring.

[balaji.bandi]

You can monitor other parameters  like vpn users, interface stats, drops, again depends on requirement and dashboard you like to see

here is some example :

https://netfixpro.com/how-to-configure-snmp-v2c-on-cisco-asa/

[prasadele]

Hello Balaji ,

Thank for the reply. I have already enabled the SNMP read for these firewall. i was more interested in the attributes or metrics we should monitor to detect performance issue with them.

i have enabled SNMP monitoring for below, are there anymore critical parameters to monitor?

Active IPSEC IKE Tunnels

Active Session Count

ASA CPU utilization %

ASA Temparature status

Cisco Memory Utilization

Failover LAN Interface status

Max Connections

Network Interfaces

Users with Active sessions

VPN Session Count

[prasadele]

Hello Balaji,

Thank you so much for your response. however i am not looking for a solution to configure snmp .. i was able to configure snmp3 already but i am not able to fond the MIB or OID which exposes the flash or disk utilization data for ASA firewall. also apart from that which are the critical paramaeters to be monitored in ASA  like cpu , memory fan power hardware?  i dont see hardware related OIDs as well.   memory pool MIb provides the data for memory , like wise which MIB provides data for hardware and Disk utilization