Monitoring interface of Cisco asa and AWS firepower firewall

Hi folks,

i am trying to create alerting template for our Firewall interface monitoring, among my 5 devices one is in cloud platform and is a Cisco Firepower.

i had used the following parameters and one one device is not showing up in the list. please suggest.

please suggest if i am using wrong variables

Find more posts tagged with

npm - network performance monitor

firewall

monitoring

Accepted answers

stuartd

I'm not 100% clear on what you are trying to attempt, but for me this bit:

is over-complicating matters.

Unless you want to have a specific set of conditions apply to your ASA interfaces, then I would just use a more general interface down alert, and as such I would set the scope to be on 'all objects'. I'm wondering if the double interface logic is somehow confusing matters.

That said, there is an easy way to check this, and that is to finish your firewall selection**, then click on one of the little down arrows at the end of a logic line, then copy & paste that into SWQL Studio and edit the last bit to look like this:

Now run the query and if it returns the expected interfaces, then you know the query is good.

** For my money, I would create a Yes/No Custom Property of something like "ASA Firewall" and then in the scope section do this:

...this approach would be easier to manage as you remove or add ASA firewalls.

HTH?

All comments

stuartd

I'm not 100% clear on what you are trying to attempt, but for me this bit:

Now run the query and if it returns the expected interfaces, then you know the query is good.

** For my money, I would create a Yes/No Custom Property of something like "ASA Firewall" and then in the scope section do this:

...this approach would be easier to manage as you remove or add ASA firewalls.

HTH?

mahantesh.shrishail

Stuartd,

thank you for the response,

Yes, the simple interface monitoring would do but in my list there is Cisco Firepower Firewall device is there, when apply the simple interface monitoring condition, like you provided above, it is only showing the Cisco ASA firewalls not the CISCO Firepower.

any suggestion on that?