5.02021-11-25T12:39:57ZTemplatesCisco ASA DiscoveryCisco ASA DiscoveryTemplatesGeneralInterfacesVPN Lan-To-LanVPN RemoteAccess- Connections In UseSNMP_AGENTCISCO-FIREWALL-MIB::cfwConnectionStatValue.protoIp.currentInUsecfwConnectionStatValueCurrentInUse607dGeneral
- Max Connections SupportedSNMP_AGENTCISCO-FIREWALL-MIB::cfwConnectionStatValue.protoIp.highcfwConnectionStatValueHigh36001dGeneral
- Failover statusSNMP_AGENTCISCO-FIREWALL-MIB::cfwHardwareStatusDetail.6cfwHardwareStatusDetail601d0TEXTCan be "Active Unit" or "Passive Unit"General{diff(0)}=1{HOST.NAME} Failover status as changedHIGH
- Memory FreeSNMP_AGENTCISCO-MEMORY-POOL-MIB::ciscoMemoryPoolFree.1ciscoMemoryPoolFree607dByteGeneral
- Memory Pool Largest FreeSNMP_AGENTCISCO-MEMORY-POOL-MIB::ciscoMemoryPoolLargestFree.1ciscoMemoryPoolLargestFree607dByteGeneral
- Memory UsedSNMP_AGENTCISCO-MEMORY-POOL-MIB::ciscoMemoryPoolUsed.1ciscoMemoryPoolUsed607dByteGeneral
- Memoty TotalCALCULATEDciscoMemoryTotal36007dFLOATBytelast("ciscoMemoryPoolUsed")+last("ciscoMemoryPoolFree")General
- Memory UsageCALCULATEDciscoMemUsage607dFLOAT%100*last("ciscoMemoryPoolUsed")/last("ciscoMemoryTotal")General
- CPU Utilization avg last 1 minSNMP_AGENTCISCO-PROCESS-MIB::cpmCPUTotal1minRev.1cpmCPUTotal1minRev607d%General{last(0)}>80{HOST.NAME} CPU Over 85 %HIGH{HOST.NAME} has had a CPU Utilization above 85 % for 3 samples taken in the last 1 minute 30 seconds.
- CPU Utilization avg last 5 minSNMP_AGENTCISCO-PROCESS-MIB::cpmCPUTotal5minRev.1cpmCPUTotal5minRev607d%General
- CPU Utilization avg last 5 secSNMP_AGENTCISCO-PROCESS-MIB::cpmCPUTotal5secRev.1cpmCPUTotal5secRev607d%General{nodata(14400)}=1{HOST.NAME} SNMP FailedHIGH{HOST.IP} SNMP Failed. Check configuration, ACL.{HOST.NAME} is unavailable by ICMP{Cisco ASA Discovery:icmpping.max(180)}=0
- Active IPSEC VPNs RemoteAccessSNMP_AGENTCISCO-REMOTE-ACCESS-MONITOR-MIB::crasIPSecNumSessions.0crasIPSecNumSessions607dThe number of currently active IPSEC sessions.VPN RemoteAccess
- Active VPNs Lan-To-LanSNMP_AGENTCISCO-REMOTE-ACCESS-MONITOR-MIB::crasL2LNumSessions.0crasL2LNumSessions607dThe number of currently active LAN to LAN sessions.VPN Lan-To-Lan
- Active SSL VPNs RemoteAccessSNMP_AGENTCISCO-REMOTE-ACCESS-MONITOR-MIB::crasSVCNumSessions.0crasSVCNumSessions607dThe number of currently active SVC sessions.VPN RemoteAccess
- ROMMON VersoinSNMP_AGENTENTITY-MIB::entPhysicalFirmwareRev.1entPhysicalFirmwareRev36001d0TEXTOS_SHORTGeneral
- Chassis VersionSNMP_AGENTENTITY-MIB::entPhysicalHardwareRev.1entPhysicalHardwareRev36001d0TEXTCHASSISGeneral
- Vendor NameSNMP_AGENTENTITY-MIB::entPhysicalMfgName.1entPhysicalMfgName36001d0TEXTVENDORGeneral
- Model NameSNMP_AGENTENTITY-MIB::entPhysicalModelName.1entPhysicalModelName36001d0TEXTMODELGeneral
- Chassis Serial NumberSNMP_AGENTENTITY-MIB::entPhysicalSerialNum.1entPhysicalSerialNum36001d0TEXTSERIALNO_AGeneral
- IOS VersionSNMP_AGENTENTITY-MIB::entPhysicalSoftwareRev.1entPhysicalSoftwareRev36001d0TEXTOS_FULLGeneral{diff(0)}>0 and {strlen()}<>0IOS version has changedINFO
- ICMP PingSIMPLEicmpping301dGeneralService state{max(180)}=0{HOST.NAME} is unavailable by ICMPDISASTER{HOST.IP} not responding to ICMP in 3 minutes
- ICMP lossSIMPLEicmppingloss607dFLOAT%General{min(5m)}>20Ping loss is too high on {HOST.NAME}AVERAGEPacket loss more than 20% on {HOST.IP}{HOST.NAME} is unavailable by ICMP{Cisco ASA Discovery:icmpping.max(180)}=0
- ICMP response timeSIMPLEicmppingsec607dFLOATsGeneral{avg(10m)}>0.20Response time is too high on {HOST.NAME}WARNINGResponse time more than 200ms for 10 minutes.{HOST.NAME} is unavailable by ICMP{Cisco ASA Discovery:icmpping.max(180)}=0
- Number of network interfacesSNMP_AGENTIF-MIB::ifNumber.0ifNumber36007dThe number of network interfaces (regardless of their current state) present on this system.Interfaces
- DescriptionSNMP_AGENTSNMPv2-MIB::sysDescr.0sysDescr36007d0TEXTOSGeneral
- sysUpTimeSNMP_AGENTSNMPv2-MIB::sysUpTime.0sysUpTime3007dFLOATuptimeGeneralMULTIPLIER0.01{last(0)}<600{HOST.NAME} reloadedAVERAGE{HOST.NAME} reloaded
ASA Interfaces discoverySNMP_AGENTdiscovery[{#SNMPVALUE},IF-MIB::ifDescr]ifDescr3600{#SNMPVALUE}@Firewalls network interfaces for discoveryA14d$1 AdminStatusSNMP_AGENTIF-MIB::ifAdminStatus.{#SNMPINDEX}ifAdminStatus[{#SNMPVALUE}]607dThe desired state of the interface.InterfacesSNMP interface status (ifAdminStatus)$1 DescriptionSNMP_AGENTIF-MIB::ifDescr.{#SNMPINDEX}ifDescr[{#SNMPVALUE}]36007d0CHARA textual string containing information about the interface. This string should include the name of the manufacturer, the product name and the version of the interface hardware/software.Interfaces$1 InBroadcastPktsSNMP_AGENTIF-MIB::ifInBroadcastPkts.{#SNMPINDEX}ifInBroadcastPkts[{#SNMPVALUE}]606dppsInterfacesCHANGE_PER_SECOND$1 InErrorsSNMP_AGENTIF-MIB::ifInErrors.{#SNMPINDEX}ifInErrors[{#SNMPVALUE}]607dFor packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol.InterfacesCHANGE_PER_SECOND$1 InMulticastPktsSNMP_AGENTIF-MIB::ifInMulticastPkts.{#SNMPINDEX}ifInMulticastPkts[{#SNMPVALUE}]607dppsInterfacesCHANGE_PER_SECOND$1 InOctetsSNMP_AGENTIF-MIB::ifInOctets.{#SNMPINDEX}ifInOctets[{#SNMPVALUE}]607dbpsThe number of octets in valid MAC frames received on this interface, including the MAC header and FCS.InterfacesCHANGE_PER_SECONDMULTIPLIER8$1 InUcastPktsSNMP_AGENTIF-MIB::ifInUcastPkts.{#SNMPINDEX}ifInUcastPkts[{#SNMPVALUE}]607dppsInterfacesCHANGE_PER_SECOND$1 OperStatusSNMP_AGENTIF-MIB::ifOperStatus.{#SNMPINDEX}ifOperStatus[{#SNMPVALUE}]607dThe current operational state of the interface.InterfacesSNMP interface status (ifOperStatus)$1 OutBroadcastPktsSNMP_AGENTIF-MIB::ifOutBroadcastPkts.{#SNMPINDEX}ifOutBroadcastPkts[{#SNMPVALUE}]607dppsInterfacesCHANGE_PER_SECOND$1 OutErrorsSNMP_AGENTIF-MIB::ifOutErrors.{#SNMPINDEX}ifOutErrors[{#SNMPVALUE}]607dFor packet-oriented interfaces, the number of outbound packets that could not be transmitted because of errors. For character-oriented or fixed-length interfaces, the number of outbound transmission units that could not be transmitted because of errors.InterfacesCHANGE_PER_SECOND$1 OutMulticastPktsSNMP_AGENTIF-MIB::ifOutMulticastPkts.{#SNMPINDEX}ifOutMulticastPkts[{#SNMPVALUE}]607dppsInterfacesCHANGE_PER_SECOND$1 OutOctetsSNMP_AGENTIF-MIB::ifOutOctets.{#SNMPINDEX}ifOutOctets[{#SNMPVALUE}]607dbpsThe number of octets transmitted in MAC frames on this interface, including the MAC header and FCS.InterfacesCHANGE_PER_SECONDMULTIPLIER8$1 OutUcastPktsSNMP_AGENTIF-MIB::ifOutUcastPkts.{#SNMPINDEX}ifOutUcastPkts[{#SNMPVALUE}]607dppsInterfacesCHANGE_PER_SECOND$1 SpeedSNMP_AGENTIF-MIB::ifSpeed.{#SNMPINDEX}ifSpeed[{#SNMPVALUE}]607dbpsInterfaces{Cisco ASA Discovery:ifInErrors[{#SNMPVALUE}].last(0)}>100 or {Cisco ASA Discovery:ifOutErrors[{#SNMPVALUE}].last(0)}>100Errors on {#SNMPVALUE}WARNINGMore than 100 in/out errors detected on {#SNMPVALUE}{#SNMPVALUE} Packets400NONOFIXED009900- Cisco ASA DiscoveryifInUcastPkts[{#SNMPVALUE}]
1AA00AA- Cisco ASA DiscoveryifInBroadcastPkts[{#SNMPVALUE}]
2000000- Cisco ASA DiscoveryifInMulticastPkts[{#SNMPVALUE}]
3880000- Cisco ASA DiscoveryifOutBroadcastPkts[{#SNMPVALUE}]
4888800- Cisco ASA DiscoveryifOutMulticastPkts[{#SNMPVALUE}]
5000099- Cisco ASA DiscoveryifOutUcastPkts[{#SNMPVALUE}]
{#SNMPVALUE} Traffic400NOGRADIENT_LINE00AA00- Cisco ASA DiscoveryifInOctets[{#SNMPVALUE}]
1GRADIENT_LINE3333FF- Cisco ASA DiscoveryifOutOctets[{#SNMPVALUE}]
2FF3333- Cisco ASA DiscoveryifInErrors[{#SNMPVALUE}]
3FFFF33- Cisco ASA DiscoveryifOutErrors[{#SNMPVALUE}]
{Cisco ASA Discovery:cfwConnectionStatValueCurrentInUse.last(0)}/{Cisco ASA Discovery:cfwConnectionStatValueHigh.last(0)}>0.80{HOST.NAME} Connections In Use > 80 %HIGHConnections In Use > 80 %{Cisco ASA Discovery:ciscoMemoryPoolFree.min(10)}/{Cisco ASA Discovery:ciscoMemoryTotal.last(0)}< 0.05{HOST.NAME} Memory Free < 5 %AVERAGEMemory Free < 5 %Active VPNsNOFIXEDGRADIENT_LINE00EE00- Cisco ASA DiscoverycrasSVCNumSessions
1GRADIENT_LINE0000EE- Cisco ASA DiscoverycrasL2LNumSessions
2EEEE00- Cisco ASA DiscoverycrasIPSecNumSessions
Connections Usage400NOFIXEDITEMCisco ASA DiscoverycfwConnectionStatValueHighBOLD_LINE00AA00- Cisco ASA DiscoverycfwConnectionStatValueCurrentInUse
CPU Load400NONOFIXEDFIXED0000EE- Cisco ASA DiscoverycpmCPUTotal5minRev
100EE00- Cisco ASA DiscoverycpmCPUTotal1minRev
2FILLED_REGIONEE0000- Cisco ASA DiscoverycpmCPUTotal5secRev
ICMP Ping400NONOFIXEDBOLD_LINE005500- Cisco ASA Discoveryicmppingsec
Memory Usage400NONOFIXEDITEMCisco ASA DiscoveryciscoMemoryTotalBOLD_LINE00AA00- Cisco ASA DiscoveryciscoMemoryPoolUsed
Service state0Down1UpSNMP interface status (ifAdminStatus)1up2down3testingSNMP interface status (ifOperStatus)1up2down3testing4unknown5dormant6notPresent7lowerLayerDown