I found this page [1] and it lead me to the following solution: action 02.0 cli command "show run | i ^ neighbor 9.9.9.9 prefix-list" action 02.5 set active_prefix_list "none" action 03.0 regexp "prefix-list ([^ ]+)" $_cli_result result active_prefix_list action 04.0 if $active_prefix_list eq no-announce action 05.0   syslog msg "no-announce prefix-list in place, restoring announce prefix list" action 06.0   cli command "conf t" [...] action 10.0 else action 11.0   syslog msg "announce prefix-list in place, making no changes" action 12.0 end [1] http://wiki.nil.com/Regular_expressions_in_Embedded_Event_Manager_applets ... View more

Naturally I found my own answer a few minutes later: http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.513.1.2.2.1#oidContent ... View more

Marc-Andre, This is a very interesting technique that overcomes some significant limitations in the IP SLA support on the ASA. I do however have a question. It looks to me like if one of your two monitored IPs were to fail the router would continue to announce the default route internally, however it would only be able to reach the half of the Internet that was still available per the SLA. Is my understanding correct, or is there something I'm missing? Is there a way to work around this issue, perhaps with another route for 0.0.0.0 0.0.0.0 to the ISP gateway address? ... View more