Firewall Connections Per Second
I work mostly with the Cisco ASA5500 family of firewalls. Along with monitoring CPU, I\'m also looking at total connections and connections per second to gauge if the box is overloaded or not. Th...
Forum Discussion
Once quick side-note: I noticed in the MIB there is something called...rn
1.3.6.1.4.1.9.9.491.1.1.1.1 --> cufwConnGlobalNumAttempted.0rn
Its of type Counter64 and counts the total number of connections since the box rebooted. I like Counter64 better than Gauge32 because then the network monitoring software (Logic Monitor) can do the delta over time calculation. No connections would be missed with such a setup.rn
Unfortunately, when running ASA5500 software version 8.4(2) this OID does not return a value. If someone in the forum has a newer version we could check to see if Cisco started using this counter. The Logic Monitor could check to see if a value was returned and if not, revert to using cufwConnGlobalConnSetupRate5.rn rn
