How To Enable SNMP On FirePower Using FDM

[davebush]

The attached document will guide you through configuring SNMP on a FirePower device using FDM. 

[Martin L]

Thanks for sharing!

[robinson]

Thanks for Sharing the write up.

[Steveo2000]

Hey, just want to ask you if you could also explain how to enable SNMP via FDM  (Cisco Firepower 1010) 6.7.

With 6.7 there is no FlexConfig for SNMP anymore and you have to use the REST API and this is nether

documented anywhere, nor are there any tutorials for SNMP configurations via API. This is ridiculously complicated.

BR

Steve

[Marcello75]

Hi, how to config the snmp via FDM using 6.7?

[Anupam Pavithran]

Here is an easy solution

https://community.cisco.com/t5/security-documents/firepower-device-manager-fdm-6-7-snmp-using-python-script/ta-p/4283247

[IvanAlvarenga25979]

I'm using 6.7 version and I'm having the same issue

[davebush]

Please note that my documentation only works on version 6.6 and prior. (I've used it as far back as version 6.4.) 

For version 6.7 or newer you will need to use @Anupam Pavithran's script from this posting. 

https://community.cisco.com/t5/security-documents/firepower-device-manager-fdm-6-7-snmp-using-python-script/tac-p/4290136#M7147

My FP1010 is on 6.7.0 now, and thanks to Anupam I'm able to get SNMP data into my Stealthwatch Enterprise system. 

[ga.hernandez]

I am using FDM on 6.6. My snmp server is located on MGMT interface. I am able to access my FTD GUI using the HTTPS to MGMT IP address; I tried to use the flex config but I got an error, seems like Management1/1 is not an interface, the error disappeared when I used "diagnostic" interface but snmp is not responding yet. What could be wrong?

[danny f]

This is another reason I will never recommend Firepower. There is no official way to add snmpv3 that I can find. The process is WAY overcomplicated. When I search for it I come across random blogs with only snmpv2. Cisco has lost my trust in the NGFW space. I just want to easily deploy and monitor network, not learn API's or flexconfig to add a simple snmp query. Super frustrated.

[Sudqi]

Hi,

Thanks for sharing, 

Can we use the out of band management interface as a source?