deverts ✭✭✭✭✭

WAAHOO! This is terrific! You are my new hero. However, since human's only have an 8 second attention span, you should enjoy that while it lasts. Seriously, MANY THANKS! D

Rob and Michal, I apologize for opening this big'o can'o worms on this topic. D

Michal, I understand it's your decision where to start, but I'm confused by your choice. SW has always been very innovative and leading the charge with funtionality, so I'm curious why you would start your support with a device that is no longer supported by Cisco in any way (EOL/EOS for the VPN 3000 Series Concentrators…

Michal, What are you referring to when you say "Support for Cisco VPN Concentrators," I haven't seen one of those in years. Or are you suggesting support for VPN configured ASA's? I'd also like to see support for STP (Spanning-Tree Protocol). I haven't written a feature request, because I'm not 100% sure how I'd like to…

Debbi and all, Without getting into the deep conversation around spending more money...SW does sell the Engineer's Toolkit, and there is an integration that allows you to right-click on any device and telnet/ssh into it. The Engineer's Toolkit brings several other advantages to the table as well with all the tools that are…

You combined 2 different "line" configuration concepts into 1 (line console and line vty). Also, taking a page from the standard book of all things security, local username/password is a no-no, you can get around this by pointing TACACS to the local user/pass; then the switch/router will process the auth request through…

Sounds like this is a similar, if not the same, issue. Polling ESX host through vcenter causes ESX Host to go into "Warning" state - why ?

Off the top of head, I can't remember what the "ip shunned" syslog number is on ASAs, but you can send syslog messages to NPM and create an alert on any "shunned" syslog messages. LEM would probably be easier, but NPM can do it too. D

Umit, As a network and security engineer, I completely understand your team's concern. However, WMI is no less insecure than SNMP. Both offer protection against unauthorized access if configured correctly, and both are needed for Orion to pull information from a windows server for the "complete picture." SNMP is good for…

cvachovecj​, Any thoughts? D

If you are using the latest NPM 12.3: Node Downtime with Duration and Minimum Length Filtering

Great question! In the past I was told (from support) that the download included all hotfixes as of the time of download. So, if HF2 was available and you just downloaded today, it included HF2. I'm not sure if that's still the case though. D

Are you running ASA code or FXOS? Also, you need to place this in the NPM queue for better visibility.

The only way is to build individual Layer2 links, and not use the aggregate link. This is also a great way for them to verify load balancing is functioning as expected/desired. ConnectNow is great for automating the connections, but as you found out, it's not the most accurate in this scenario. D

">chr@draware.dk, I'm not a SQL person and couldn't begin to assist you in disabling the topology polling as you requested. However, I have had experience with this issue in the past. I've always been able to fix the issue by upgrading the device. NPM is just polling the info it needs via SNMP, and not all devices handle…

campbech‌ Do you have a requirement to split up the monitoring? Unless you have a special requirement, or some seriously small WAN links between sites, 650 devices should be easily monitored on your existing platform. I'm running: * a single server (VM) for NPM/NCM/IPAM/SAM/NTA with 4 CPUs and 8GB RAM * a single server…

Hi, Scott Dawson, I'm always a little cautious with new releases for any software. Even though SW puts it's releases through some of the best testing I've ever seen, there are still always some glitches due to differences with each user environment. It's part of the game we play in IT. I typically wait 30 - 45 days from GA…

Does this other posting look similar to your issues? Network Sonar Discovery fails If so, can you try the suggestion? D

You might also want to try running the Configuration Wizard again to repair your installation.

Hey, pass on to your team... Can I be adopted!?! D

All, I wanted to come back around on this and let you know what was done with the aid of a VERY helpful Support admin (I believe she is more of a senior support admin, and if she reads this, I don't mean to offend with not knowing your real job title.). The below process took about 2.5 hours to complete as we verified data…

As rharland2012 mentioned, it "all depends." Given your simple layout above, I'd probably configure the router WAN interface only (ingress and egress). But let's compound the example by adding a local file server for backups, then I'd configure the switch and not the router, and watch the uplinks to the router and server.…

I can't speak for the above, but my issue appears to be something else. Here's what I found... We used the unmodified (accept adding e-mail notification) "APM: Component" alert that comes with APM 4.0.1, and tweeked the threshold of an application component to trigger a critical condition. The application monitor contains…

What was the solution for this, if you don't mind sharing. I just upgraded to 4.0.1 over teh weekend, and I'm seeing the same problem. Dwyane

So, here's the latest.... Issues 2 and 3 were definitely corrected by SP3. (Note to Dev team: THANK YOU!) Issue #1 is still a problem. Here's what I'm seeing now. Same situation, node down on a WAN router. The alert is displayed and the e-mail notification are occurring at about the same time. Network Atlas doesn't change…

Thanks for the response! The Network Atlas components (#2 and 3 above) appear to be corrected. I'll have to wait for an outage to see if the alerts (#1) are working correctly. Dwyane

All, I just noticed SP3 for NPM is available as of yesterday and it appears to have some fixes for some of the issues I'm seeing. I'm going to try this, but if you have any input towards my issues, I'd still appreciate the feedback. Dwyane

pcheek1991​, I would agree, it appears to be an issue on your NPM server or pollers. I would begin with reviewing your latest server patches. Did something get installed by a patch that has "replaced" the old DLL with a new one? Have you rebooted your servers recently? Have you run the Orion Configuration Wizard? D

cpinto​, Firstly, Welcome to the club! Secondly, what are you trying to accomplish? Managing any system means different things to different people; and it means different things per system type. What functionality are you looking to accomplish by managing your content filters? Some people think backing up the config is…

dwsmithjr​, Generally speaking, discards are a direct result of buffering or QoS configuration. Here's a great reference for investigating: Troubleshooting Input Queue Drops and Output Queue Drops - Cisco Typically I see this occur during peak times when there is no QoS policy in place on interfaces, and I see it more once…