Firewall Connections Per Second | Archive

Dan_Massameno · 2014-08-13T00:00:00Z

I work mostly with the Cisco ASA5500 family of firewalls. Along with monitoring CPU, I\'m also looking at total connections and connections per second to gauge if the box is overloaded or not. The first two Logic Monitor handles out of the box. The third (Connections per Second) is missing.The good news is Cisco exposes this as a Gaugge32 via SNMP....1.3.6.1.4.1.9.9.491.1.1.1.11.0 --> cufwConnGlobalConnSetupRate5.0This gives the rolling 5-minute average of connections per second. I prefer this over the 1-min average because I want the averaging function to have a bigger window than my poling process (I\'m using the LogicMonitorâ€™s default 2-min poling.) With a shorter window I might be \'\'catching\'\' a spike or valley that may not be representative of the overall trend.I\'ve been monitoring this OID for almost a week now and it\'s returning good data (see attached screen shot.) Looks like a great addition to the other important metrics.If we can get enough people responding to this post maybe we can get LogicMonitor to build it into the standard Global PIX/ASA Stats datasource?

MoreDiscussions

Firewall Connections Per Second | Archive | LogicMonitor Community