Cisco ASA Connections

[#1]

UnDP for Cisco ASA Connections and CPU Utilization.

Polls below OIDs for:

• Current total connections
• Max total connections
• Connections per second over the last 60 seconds
• Connections per second over the last 300 seconds
• CPU Utililzation over the last 5 seconds
• CPU Utilization over the last 60 seconds

CISCO-FIREWALL-MIB:ciscoFirewallMIB

1.3.6.1.4.1.9.9.147.1.2.2.2.1

CISCO-UNIFIED-FIREWALL-MIB

cufwConnGlobalConnSetupRate1.0 - 1.3.6.1.4.1.9.9.491.1.1.1.10

cufwConnGlobalConnSetupRate5.0 - 1.3.6.1.4.1.9.9.491.1.1.1.11

Reference Cisco Community document, "SNMP MIBs and Traps on the ASA", for a detailed list of supported MIBS on the Cisco ASA.

https://supportforums.cisco.com/docs/DOC-1295#Connection_Information

[selspiero99]

just what i was after - thanks!

[HumanK]

I did a MIB Viewer on thes OID's, and got an error. Then I took off the last 2 numbers, and it came up in the viewer. The viewer shows these two numbers(40.6 and 40.7) in their own rows. Now how do I add these to a graph like you have above on the device page in NPM?

Thanks!

[geeknet]

To add the graphs, follow the procedure outlined by aLTeReGo, posted here ,

[geeknet]

Updated UnDP with pollers for Cisco ASA connections per second

[chris.schear]

Is there a way to break out and chart TCP versus UDP connections separately?

Re: https://supportforums.cisco.com/docs/DOC-1295#Connection_Information

cufwConnSetupRate1.udp = Gauge32: 0 Connections Per Second <---- The averaged number of UDP connections which the firewall establishing per second, averaged over the last 60 seconds.

cufwConnSetupRate1.tcp = Gauge32: 65 Connections Per Second <---- The averaged number of TCP connections which the firewall establishing per second, averaged over the last 60 seconds.

[chipsch]

Excellent UnDP. Downloading and putting to use shortly.

[noobes]

I ran "show snmp-server oidlist" on a ASA5545 and nowhere on it did I find OID 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6 Description="Listing of total current connections established through/on Cisco ASA appliance. Yet when I poll this OID I'm getting a result back?

[AlexSoul]

Awesome, thanks for sharing. Have just set it all up

[lion66six]

Thanks for the info here, provided me the info I needed for monitoring this within a different tool (PRTG).