PIX CPU Utilization

[edwong]

Does anybody know how to see the CPU utilization of a PIX firewall. Can I monitor it using MRTG as I am now using it to monitor traffic.

Also I got the winsyslog to capture syslog of the PIX to one of my servers, is there any software that can analyse those log and give me a traffic breakdown.

Thanks.

[awalnet]

There is no Simple Network Management Protocol (SNMP) support for CPU utilization on PIX at this time. Currently PIX SNMP support is limited to

system and interfaces groups from the Management Information Base II (MIB-II) and CISCO-SYSLOG-MIB.

Regards,

Zeshan Jalali

CCNP,CCDA,Cisco Security Specialist 1, CCNA,CCIE(Written)

[rmushtaq]

Have a look at CSCdm74651 via CCO Bug Toolkit for the SNMP MIB part.

[steve.connolly]

You can view CPU utilization using the Pix Device Manager (PDM). This is a binary file that is TFTPed onto the Pix box, and allows access to the firewall via a secure web connection. Besides being a GUI for configuring the firewall, it also has a section that will graph CPU, Memory, and Xlate utilization, among other things.

I must say that I was very apprehensive on installing the tool at first. We have had it installed for about a week now, and I have to admit that I like it. Besides being able to look at utilization info, it also allows you to reorder access lists very easily. I would say that it is one of the best written Cisco apps I have seen, however I'm not ready to give up the command line completely yet.

Steve

[danrodri]

PIX v6.0 and above have the show cpu usage command. I do not recall seing a MIB defined you can use for monitoring.