Cisco Firepower Threat Defense, Version 6.2.3.4 (Build 42), ASA Version 9.9(2)15
Hello.
I just added new Cisco FTD appliance, but there is no information about CPU, Memory, firewall statistics. And this is how the graphics looks like:
[cid:image001.png@01D47501.57E9E370]
As far as I know, MIBs has not changed.
Would you please let me know if would it be supported?
Regards.
David.
Last time I looked at these devices, that data wasn't exposed in SNMP.
If it is present, we can add it. If not, we can't.
Adam.
Sent from BlueMail
On 5 Nov 2018, 18:16, at 18:16, David Jesus Maturano Sanchez p-dmaturano@bestel.com.mx wrote:
Hello.
I just added new Cisco FTD appliance, but there is no information about CPU, Memory, firewall statistics. And this is how the graphics looks like:
[cid:image001.png@01D47501.57E9E370]
As far as I know, MIBs has not changed.
Would you please let me know if would it be supported?
Regards.
David.
Dear
SNMP in FTD is a pile of steaming cr*p.
FTD being a new “unified” OS is not that “unified”. You are currently polling the LINA instance of the FTD (so the ASA environment); thus you are seeing the ASA virtual interfaces.
You would have to configure SNMP on the device (FX-OS) level and poll the device on its management interfaces in order to see that data. Not the diagnostic interfaces which are only exposing the LINA instance.
So basically the management interface SNMP exposes the FX-OS and its device sensors (hardware + resources in use on FX-OS level; does not expose any frontend traffic interfaces); and the diagnostic interface SNMP exposes the ASA metrics (so traffic and so on).
Adam imported the FX-OS mibs so the metrics for the hardware should all be there (confirmed on 2100, to be tested soon with 4100/9300 when we have the time), however currently the LINA instance (ASA) is discovered as an unknown device. I’m not even sure they are exposing all the ASA metrics (doesn’t seem like it).
Cisco BU said that the next FTD release will be another major overhaul so I’m not sure what this is going to look like in the future.
Kind regards
From: observium observium-bounces@observium.org On Behalf Of Adam Armstrong via observium Sent: maandag 5 november 2018 19:24 To: David Jesus Maturano Sanchez p-dmaturano@bestel.com.mx Cc: Adam Armstrong adama@memetic.org; Pieter Meyer via observium observium@observium.org Subject: Re: [Observium] Cisco Firepower Threat Defense, Version 6.2.3.4 (Build 42), ASA Version 9.9(2)15
Last time I looked at these devices, that data wasn't exposed in SNMP.
If it is present, we can add it. If not, we can't.
Adam.
On 5 Nov 2018, at 18:16, David Jesus Maturano Sanchez <p-dmaturano@bestel.com.mx mailto:p-dmaturano@bestel.com.mx > wrote:
Hello.
I just added new Cisco FTD appliance, but there is no information about CPU, Memory, firewall statistics. And this is how the graphics looks like:
As far as I know, MIBs has not changed.
Would you please let me know if would it be supported?
Regards.
David.
I added FXOS as well, but maybe I don’t see more information because it’s a 4110 appliance.
I hope it could be done soon.
Thank you guys.
Regards.
David M.
De: Stef Renders stef.renders@cronos.be Fecha: lunes, 5 de noviembre de 2018, 12:39 Para: 'Observium' observium@observium.org, David Jesus Maturano Sanchez p-dmaturano@bestel.com.mx CC: Adam Armstrong adama@memetic.org Asunto: RE: [Observium] Cisco Firepower Threat Defense, Version 6.2.3.4 (Build 42), ASA Version 9.9(2)15
Dear
SNMP in FTD is a pile of steaming cr*p.
FTD being a new “unified” OS is not that “unified”. You are currently polling the LINA instance of the FTD (so the ASA environment); thus you are seeing the ASA virtual interfaces.
You would have to configure SNMP on the device (FX-OS) level and poll the device on its management interfaces in order to see that data. Not the diagnostic interfaces which are only exposing the LINA instance.
So basically the management interface SNMP exposes the FX-OS and its device sensors (hardware + resources in use on FX-OS level; does not expose any frontend traffic interfaces); and the diagnostic interface SNMP exposes the ASA metrics (so traffic and so on).
Adam imported the FX-OS mibs so the metrics for the hardware should all be there (confirmed on 2100, to be tested soon with 4100/9300 when we have the time), however currently the LINA instance (ASA) is discovered as an unknown device. I’m not even sure they are exposing all the ASA metrics (doesn’t seem like it).
Cisco BU said that the next FTD release will be another major overhaul so I’m not sure what this is going to look like in the future.
Kind regards
From: observium observium-bounces@observium.org On Behalf Of Adam Armstrong via observium Sent: maandag 5 november 2018 19:24 To: David Jesus Maturano Sanchez p-dmaturano@bestel.com.mx Cc: Adam Armstrong adama@memetic.org; Pieter Meyer via observium observium@observium.org Subject: Re: [Observium] Cisco Firepower Threat Defense, Version 6.2.3.4 (Build 42), ASA Version 9.9(2)15
Last time I looked at these devices, that data wasn't exposed in SNMP. If it is present, we can add it. If not, we can't. Adam. Sent from BlueMailhttps://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bluemail.me%2Fr%3Fb%3D14063&data=02%7C01%7Cp-dmaturano%40bestel.com.mx%7C9242aea8e9d14dd724d708d6434e076b%7Ccaca42e2ad4a4d19824c3ff3709bd840%7C0%7C0%7C636770399759840288&sdata=YWp%2BfWGdkQjAIhSjODD9jm85NcWq8XQtpt9HiixRd64%3D&reserved=0 On 5 Nov 2018, at 18:16, David Jesus Maturano Sanchez <p-dmaturano@bestel.com.mxmailto:p-dmaturano@bestel.com.mx> wrote:
Hello.
I just added new Cisco FTD appliance, but there is no information about CPU, Memory, firewall statistics. And this is how the graphics looks like:
[cid:image001.png@01D47501.57E9E370]
As far as I know, MIBs has not changed.
Would you please let me know if would it be supported?
Regards.
David.
participants (3)
-
Adam Armstrong -
David Jesus Maturano Sanchez -
Stef Renders