This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Monitoring ASA Tunnels

dclick over 13 years ago

I have a question that I think I already know the answer too, but thought I would ask anyway.

We have a Cisco ASA 5520 that I use for all VPN activity - anyconnect, ipsec, ssl, and site-2-site. I have seen the undp poller that will show me the number of connections, but does anyone know of a undp or snmp or other way to monitor each site-2-site tunnel for things like throughput?

I can monitor the outside and inside interfaces of the firewall, but that is too generic - I was wondering if we can get more granular?

Any thoughts?

Top Replies

haris over 13 years ago +1

+1. I would love to be able to do the exact same thing

0 haris over 13 years ago

+1. I would love to be able to do the exact same thing
Cancel
Vote Up +1 Vote Down

Cancel
0 aaron.hebert over 13 years ago

bump for interest
Cancel
Vote Up 0 Vote Down

Cancel
0 SteveHDI over 13 years ago in reply to aaron.hebert

I am in also for this. Please also add any videos on configuring these custom pollers
Cancel
Vote Up 0 Vote Down

Cancel
0 scottyd over 13 years ago

I would second that also.
Cancel
Vote Up 0 Vote Down

Cancel
0 dregier over 13 years ago

We would love this too!
Cancel
Vote Up 0 Vote Down

Cancel
0 neilmborilla over 13 years ago

absolutely interested on this (as well as if possible for checkpoint)
Cancel
Vote Up 0 Vote Down

Cancel
0 lchance over 13 years ago

We have a mix of ASA - PIX and SonicWall and I need this support right away!!!!!!!!!

Is anyone using IPERF or QCHECK for testing any tunnel throughput?
I'm about to embark on using these products or else 'try' get purchased a product named PathView from Apparent Networks.
I can't see Solarwinds having a solution anytime soon. And by the way the ASA is limited to IP SLA ICMP-REPLY which is why I'm looking elsewhere for an immediate solution.
Cancel
Vote Up 0 Vote Down

Cancel
0 sarmstrong1 over 13 years ago

Performance to and from remote locations over the WAN / VPN / MPLS / Open Internet is exactly what PathView Cloud from Apparent Networks is designed to do. It can tell you end to end metrics for the circuit, maximum achievable throughput, utilized bandwidth, latency, loss, jitter, if QoS is being altered and the achievable MOS score for VoIP circuits.
Its actually a great compliment to Orion, for all the site to site connections where device info is not available or not applicable. There is a demo on the Apparent site, www.apparentnetworks.com
Cancel
Vote Up 0 Vote Down

Cancel
0 dclick over 13 years ago in reply to sarmstrong1

Thanks for the suggestion, but I am not interested in spending MORE money on yet ANOTHER software when Solarwinds has that capability. Surley if vendor such as Apparent can do it, so can Solarwinds.
We have invested alot of money in the Orion family, and I want to leverage that.
Cancel
Vote Up 0 Vote Down

Cancel
0 byrona over 13 years ago in reply to dclick

I agree with Dclick, I would prefer to leverage significant investment I have made and continue to make each year for maintenance. I also don't want to have to manage multiple different applications for the same or similar thing. We purchased Orion to be our entire enterprise monitoring solution to reduce what we have to manage and to have a single pane of glass through which to view our infrastructure.
Cancel
Vote Up 0 Vote Down

Cancel