cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
271
Views
1
Helpful
2
Replies

Cisco Firepower FMC, Widget Site-2-Site Tunnel Status

Marc0
Level 1
Level 1

Hi

I have a Firepower FMC on code 7.2.9 and I'm struggling to create a widget on the dashboard page to show me Site-2-Site VPN Tunnel status.

Has anyone tried this and be kind to share their instructions/urls on how to do this, please. 

I am aware this is possible by default in code 7.3 onwards but need to get a easier view from using code 7.2.9

2 Replies 2

lisa52smith
Level 1
Level 1

Creating a widget for Site-to-Site VPN Tunnel status on a Firepower Management Center (FMC) dashboard in version 7.2.9 is a bit more limited compared to later versions like 7.3 and beyond. However, there are still some ways you can achieve this in version 7.2.9 by manually creating a custom widget or using existing features. Here's a general approach and workarounds:

1. Check Default VPN Status Widgets

In FMC 7.2.9, there may be pre-existing widgets or options for VPN monitoring that you can use without having to manually create a custom widget. For example, you can look for:

  • VPN Status: It should show the overall status of VPN tunnels, including Site-to-Site.
  • VPN Overview: A summary of active VPNs and their health.

To check these:

  1. Log in to FMC.
  2. Go to the Dashboard.
  3. Click on Add Widget to see if there's a built-in widget for VPN status under the "VPN" category.
  4. Drag and drop any relevant widgets into your dashboard.

If you can't find a widget for VPN tunnel status, proceed with the custom workaround below.

2. Creating a Custom Widget (Workaround)

If no default widget is available for your Site-to-Site VPN status, you can try creating a custom widget using the API or Reports.

Method 1: Use the FMC API to Query VPN Status

You can use the FMC API to query the status of your VPN tunnels and then create a custom widget. The Firepower API can provide information about VPN tunnel status, such as whether they are up or down.

  1. Get VPN Tunnel Status via API:

    • The FMC API can be used to fetch the VPN status.
    • Here's an example of how to query the VPN status using the API.

    API Endpoint (GET request):

 

https://<FMC_IP>/api/fmc_config/v1/domain/<DOMAIN_UUID>/vpn/tunnels

 

This will return a list of Site-to-Site VPN tunnels, including the status (up/down).

  • Display VPN Status in a Custom Widget:

    • You can create a custom widget by using the API data.
    • The widget will display the status of VPN tunnels by making API calls and showing a simple visual representation (e.g., Green for "Up", Red for "Down").

Method 2: Use Reports to Show VPN Status

In FMC 7.2.9, you can create a Custom Report that includes Site-to-Site VPN status information and then add that report to your dashboard.

  1. Create a Custom Report:

    • In FMC, go to Analysis > Reports.
    • Create a new report template that includes VPN status information.
    • Under VPN or Tunnel status, select relevant filters for Site-to-Site VPNs.
  2. Add the Report to the Dashboard:

    • After the report is created, go to the Dashboard.
    • Add the report as a widget by selecting the Custom Reports section.
    • Select your newly created report, and it should show a status summary of your VPN tunnels.

3. Upgrading to FMC 7.3+

Since you mentioned that you are aware this feature is available by default in FMC 7.3 and later versions, if upgrading to 7.3 is an option, you will have more out-of-the-box features for Site-to-Site VPN monitoring. The 7.3 release includes more intuitive widgets and visualization tools, including the VPN Status widget.

Summary of Steps for 7.2.9:

  1. Check Default VPN Widgets in the Dashboard.
  2. If none are found, use FMC API or Reports to create a custom solution.
  3. Consider upgrading to FMC 7.3+ for easier access to pre-configured widgets.

Helpful Links:

Thank you for the information, this seemed logical however struggled to get any of it working on the current fmc code. Rather spending too much time trying to make this work, think Ill go for the upgrade and see how the new features around reporting and widgets go.

Ill feed back once ive done the upgrade