Dear

 

SNMP in FTD is a pile of steaming cr*p.

 

FTD being a new “unified” OS is not that “unified”. You are currently polling the LINA instance of the FTD (so the ASA environment); thus you are seeing the ASA virtual interfaces.

 

 

You would have to configure SNMP on the device (FX-OS) level and poll the device on its management interfaces in order to see that data. Not the diagnostic interfaces which are only exposing the LINA instance.

 

So basically the management interface SNMP exposes the FX-OS and its device sensors (hardware + resources in use on FX-OS level; does not expose any frontend traffic interfaces); and the diagnostic interface SNMP exposes the ASA metrics (so traffic and so on).

 

Adam imported the FX-OS mibs so the metrics for the hardware should all be there (confirmed on 2100, to be tested soon with 4100/9300 when we have the time), however currently the LINA instance (ASA) is discovered as an unknown device. I’m not even sure they are exposing all the ASA metrics (doesn’t seem like it).

 

Cisco BU said that the next FTD release will be another major overhaul so I’m not sure what this is going to look like in the future.

 

Kind regards

 

From: observium <observium-bounces@observium.org> On Behalf Of Adam Armstrong via observium
Sent: maandag 5 november 2018 19:24
To: David Jesus Maturano Sanchez <p-dmaturano@bestel.com.mx>
Cc: Adam Armstrong <adama@memetic.org>; Pieter Meyer via observium <observium@observium.org>
Subject: Re: [Observium] Cisco Firepower Threat Defense, Version 6.2.3.4 (Build 42), ASA Version 9.9(2)15

 

Last time I looked at these devices, that data wasn't exposed in SNMP.

If it is present, we can add it. If not, we can't.

Adam.

Sent from BlueMail

On 5 Nov 2018, at 18:16, David Jesus Maturano Sanchez <p-dmaturano@bestel.com.mx> wrote:

Hello.

I just added new Cisco FTD appliance, but there is no information about CPU, Memory, firewall statistics. And this is how the graphics looks like:

 

As far as I know, MIBs has not changed.

Would you please let me know if would it be supported?

 

Regards.

David.