Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Can't identify Cisco Pix or ASA with ipMonitor

I installed ipMonitor and ran the discovery. I have (1) Cisco 2811 router, (1) Cisco 3560 Switch, (1) Cisco Pix firewall, and (1) Cisco ASA firewall.

The discovery process was able to identify the 2811 router and 3560 switch precisely, and with all of the available monitors that come with those specific Cisco devices.

It was unable to identify the Pix or ASA firewalls as such, and simply added an ip address and ping monitor. How do I enable ipMonitor to identify the Cisco firewalls in detail like it did for the switch and router?

Find more posts tagged with

Accepted answers

chaldz

Normally on a Cisco PIX and ASA SNMP queries are locked down based on IP address. So within the ASA and PIX config, you need to add your IP address of your ipMonitor server. Something like: snmp-server host inside xxx.xxx.xxx.xxx community public (or whatever your readonly string is).

All comments

mdiotte

Hi rgcarroll,

ipMonitor likely did not get a response via SNMP when you were performing a scan of those devices. Are you certain that SNMP connections work from the ipMonitor host to the firewall devices?

I would try by adding a SNMP monitor manually in ipMonitor to the device and seeing if that works. If it does not it may be that the devices do not have SNMP enabled, are using incorrect community or are not responding to the ipMonitor server do to some configuration reason.

You can also use the SNMP Monitor wizard under the configuration tab of ipMonitor to try and walk the firewall devices. Try a OID such as 1.3.6.1 so that it will walk all the OID's available.

Hope this helps!

chaldz

FormerMember

We have a CISCO-AS5520 Firewall. I have a SNMP Version 2 monitor build with the "number of active connections" as follows:

UDP Port = 161

OID = 1.3.6.1.4.1.9.9.491.1.1.1.6.0

Analyze the Result as: Numeric data < 3000

The monitor is down when we have more then 3000 firewall connections from the intranet nic.