ASA monitoring with snmp

Dear Perry,

please use our SNMP Tester to scan against the device (please use the option "Scan for available Standard Interfaces") with the correct settings (SNMP Version, Community String, ect.). Which result do you get?

Best Regards.

Found standard interfaces: No standard interfaces found

Dear Perry,

this means that the ASA didn't respond to the SNMP Requests (obviously there are standard interfaces on the ASA). Please check if the correct settings are made, and if the PC/Server where PRTG is installed (respectively its IP) is allowed to send SNMP Requests to the ASA.

Best Regards.

Check that all. The settings are all OK. I am monitoring more than 1 ASA's with PRTG. The others are no problem. The only difference is that I am using the internal interface for this ASA. It has something to do with the PRTG software, because I am able to connect using solarwinds (SNMP).

Have to create a connection to a custom interface?

Dear Perry,

if you are monitoring other ASA's with PRTG, then it can hardly be an issue within PRTG that monitoring this one ASA doesn't not work. Please see if the following tipp may help: How can I see all interfaces when adding an SNMP sensor for my Cisco device?.

Best Regards.

Hi Torsten,

Adding a device first and then edit settings? How do I add a device and then change settings within PRTG?

If solarwinds is able to connect using snmp - why can't PRTG? It does not make sence to me.

I hope you can help, because I am lost here.

Regards, Perry

to edit the device settings either click on the device and then use the settings tab at the top of the page or right click on the device and then select settings from the drop down.

Now edit the "Credentials for SNMP Device".

I am sorry for this question, but I thought I knew how to work with PRTG. I am feeling like a newbie again.

Is there a way to add a device without using snmp and then edit its configuration? I seems to have the chicken / egg problem.

Can I give you guys a call?

Please advice

@perry: two possible problems here. Either your PRTG server does not have layer-3 access to the ASA or the ASA is not configured to accept SNMP requests from PRTG. This assumes that PRTG as the correct read-only SNMP community string or that your user/pass is correct if using snmpV3.

Can you ping the ASA from the PRTG server? If yes then your problem is #2. Check for this line in your ASA config:

snmp-server host inside 10.1.1.1 community MyReadOnlyString

Where the PRTG server is 10.1.1.1 and is on the "inside" network.

In the ASA, you have to specify each and every IP address that needs SNMP access.

Also if there happens to be a filter device between the ASA and the Lan then it may be blocking your snmp queries. When I say filter device I mean something like a Barracuda Web Filter.

Why not NetFlow?

As of PRTG v12, there are several sensors natively available for monitoring VPN connections on a Cisco ASA:

• SNMP Cisco ASA VPN Connections Sensor
• SNMP Cisco ASA VPN Traffic Sensor
• SNMP Cisco ASA VPN Users Sensor