Nagios Core monitoring Cisco ASA

[ThinkFast86]

Hi All,

I'd like to monitor cisco asa from nagios core 4.1.1 on ubuntu server 14.04. Could you please help me with some instructions or a manual to do that?
I have already installed the snmp service on my server and i use it for monitoring windows hosts with nsclient. The cisco asa is 5505.

Thank you,
Best Regards.

[hsmith]

Check out some of these plugins:

https://exchange.nagios.org/directory/P ... IX/details
https://exchange.nagios.org/directory/P ... ns/details
https://exchange.nagios.org/directory/P ... EM/details

These plugins were not wrote by us, but the exchange is a great place to check to see if anyone has wrote a plugin may work with your devices.

[ThinkFast86]

Hello again,

I am trying to syntax the nm_check_asa_connections. When i use this command:

Code: Select all

./nm_check_asa_connections -H IP -C public -P 2c -w 230000 -c 245000

I can receive the correct result.

Now check my comands.cfg:

Code: Select all

define command { 
        command_name    nm_check_asa_connections
        command_line    $USER1$/nm_check_asa_connections -H $HOSTADDRESS$ -C $ARG1$ -p $ARG2$ -w $ARG3$ -c $ARG4$ 
        } 

and my service:

Code: Select all

define service{
      service_description ping
      use			generic-service
	  host_name		CISCO ASA
      service_description	Cisco ASA connections
      check_command	nm_check_asa_connections!public!2c!23000!24500
      }

When i restart the nagios i receive uknown error missing argument -p.
Could you please help me? What am i doing wrong?

Thank you.

[ThinkFast86]

Ok i found the problem.
In comands.cfg i was using -p insted of -P and then i realize that - p is the deafault port number and not the version of snmp.

Could you please inform me if there is any other plugin like netflow or something like that?
I want to check the bandwidth of my ASA per interface.
One more thing, if i wanted to check the bandwidth per user what i have to do?
I can see this information from asa, is there anyway to retrieve it with snmp?

Thanks in advance.

[rkennedy]

Without access to an ASA here, it makes things a bit difficult to help. Ah, dang lowercase p!

For monitoring netflow, I recommend taking a look at NNA (https://www.nagios.com/products/nagios- ... -analyzer/) - this will allow you to examine it a bit more.

If you wanted to check bandwidth per interface, you could probably find the value from a SNMP walk. Could you run one against the ASA and post the full output?

It really depends, based on your device, if you'll be able to pull it based on a user. I haven't heard of something like this before though.

[ThinkFast86]

Thanks for your help.

[hsmith]

Did you have any additional questions? Or would you like us to close this thread.