Network Management

Using UDT to poll Cisco ASA devices

UDT 3.3 enables Cisco ASA (Adaptive Security Appliance) devices to be polled and monitored. This articles cover how to set up a Cisco ASA device to be polled. It also covers troubleshooting.

First published date

10/30/2018 9:37 PM

Last published date

10/30/2018 9:37 PM

Overview

The article covers the new UTD feature that allows the monitoring of Cisco Adaptive Security Appliance (ASA)

Product section

User Device Tracker

Resolution

 

The device must be already added as SNMP node, so add the device as usual using the Network Discovery or AddNode wizard.

  1. Open Edit Properties for the device, and check Advanced Cisco ASA Monitoring in the Cisco ASA block.

  2. Fill in the device credentials, and click TEST button to validate.

  3. Submit the form, wait for at least the polling interval, and check device ports.

  4. If the UDT setting UDT.UI.ShowAlsoIndirectConnections is switched on, the port endpoints should be shown on the Port Details widget on the Node Details page.


Troubleshooting  

Can't add the device as SNMP node 

  • Check the device is available to the host.  Ensure the Poller IP has been added to the device snmp-server host with the correct SNMP configurations (SNMP version, community string, etc.).
  • To see all device hosts by PuTTY:
    - Connect to the device by PuTTY and run the following commands:
        enable > EnablePassword;
        configure terminal;
        show snmp-server host.

How to Add host to the device by PuTTY:
  • enable > EnablePassword;
    configure terminal;
    snmp-server host (interface) (host IP) (SNMP configuration)

    SNMP v2 example:snmp-server host inside 10.10.10.10 community public


Device does not show endpoints on the Port Details page 

  • Incorrect CLI credentials

    Open Edit Properties and check Advanced Cisco ASA Monitoring in the Cisco ASA block. Click TEST button for CLI credential validation.

  • Incorrect snmp-server host
    Check device snmp-server host. Poller IP should be added to device snmp-server host with correct SNMP configurations (SNMP version, community, …).
    (see the previous step how to check or add snmp-server host )

  • Incorrect CLI Device Template 
    Open Edit Properties and change Device Template in the CLI Device Template block to the Cisco Adaptive Security Appliance

For additional information on configuring SNMP on an Cisco ASA device, see The Cisco ASA 5500 Series Configuration Guide using the CLI (© 1992-2018 Cisco and/or its affiliates, available at https://www.cisco.com/c/en/us/index.html, obtained on November 15, 2018).