Skip to main content

Cisco ASA

Plugin: go.d.plugin Module: snmp

Overview

Monitor Cisco ASA (firewall) with Netdata over SNMP. Netdata recognizes the device automatically by its sysObjectID (recognized across 126 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.

Netdata's SNMP collector matches the device to the cisco-asa.yaml profile via sysObjectID/sysDescr, then polls the OIDs it declares.

This integration is supported on all platforms.

This integration supports multiple instances configured side-by-side.

Default Behavior

Auto-Detection

Auto-detected as Cisco ASA via sysObjectID/sysDescr.

Limits

The default configuration for this integration does not impose any limits.

Performance Impact

The default configuration for this integration is not expected to impose a significant performance impact on the system.

Setup

You can configure the snmp collector in two ways:

MethodBest forHow to
UIFast setup without editing filesGo to Nodes → Configure this node → Collectors → Jobs, search for snmp, then click + to add a job.
FileIf you prefer configuring via file, or need to automate deployments (e.g., with Ansible)Edit go.d/snmp.conf and add a job.
important

UI configuration requires paid Netdata Cloud plan.

Prerequisites

SNMP access

SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site's SNMP hub.

Configuration

Options

Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.

via UI

Configure the snmp collector from the Netdata web interface:

  1. Go to Nodes.
  2. Select the node where you want the snmp data-collection job to run and click the (Configure this node). That node will run the data collection.
  3. The Collectors → Jobs view opens by default.
  4. In the Search box, type snmp (or scroll the list) to locate the snmp collector.
  5. Click the + next to the snmp collector to add a new job.
  6. Fill in the job fields, then click Test to verify the configuration and Submit to save.
    • Test runs the job with the provided settings and shows whether data can be collected.
    • If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.

via File

The configuration file name for this integration is go.d/snmp.conf.

The file format is YAML. Generally, the structure is:

update_every: 1
autodetection_retry: 0
jobs:
- name: some_name1
- name: some_name2

You can edit the configuration file using the edit-config script from the Netdata config directory.

cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf
Examples

There are no configuration examples.

Alerts

There are no alerts configured by default for this integration.

Metrics

On top of the generic SNMP baseline (the Generic SNMP Device integration — interfaces, system, IP/TCP/UDP, host resources), this Cisco ASA profile adds the metrics below. Each is collected only where the device exposes the matching OID — inclusion means the profile requests it; availability depends on the device model and software.

156 metrics in 21 groups; each row is a chart context usable in alerts.

GroupMetrics
Hardware / FRU3
Hardware / Fan1
Hardware / FanTray1
Hardware / Firewall1
Hardware / PowerSupply1
Hardware / Redundancy4
Hardware / Sensor6
Hardware / StackWise4
Network / Firewall2
Network / IP28
Network / Interface32
Network / RTT5
Network / Routing10
Network / TCP12
Network / UDP6
Network / VPN7
System / CPU6
System / Memory4
System / Uptime1
System / VirtualSwitch1
Uncategorized21

Hardware / FRU

Metric (chart context)UnitScopeDescription
snmp.device_prof_cefcFRUCurrentAper fru_indexCurrent supplied by the FRU or current required to operate the FRU
snmp.device_prof_cefcFRUPowerAdminStatus{status}per fru_indexAdministratively desired FRU power state
snmp.device_prof_cefcFRUPowerOperStatus{status}per fru_indexOperational FRU power state

Hardware / Fan

Metric (chart context)UnitScopeDescription
snmp.device_prof_ciscoEnvMonFanState{status}per fan_status_indexCurrent state of the fan

Hardware / FanTray

Metric (chart context)UnitScopeDescription
snmp.device_prof_cefcFanTrayOperStatus{status}per fru_index, cefc_fan_tray_directionOperational state of the fan or fan tray

Hardware / Firewall

Metric (chart context)UnitScopeDescription
snmp.device_prof_cfwHardwareStatusValue{status}per hardware_type, hardware_descCurrent status of the resource

Hardware / PowerSupply

Metric (chart context)UnitScopeDescription
snmp.device_prof_ciscoEnvMonSupplyState{status}per power_supply_indexCurrent state of the power supply

Hardware / Redundancy

Metric (chart context)UnitScopeDescription
snmp.device_prof_cRFStatusDuplexMode{status}deviceRedundancy duplex mode (simplex=no redundancy, duplex=redundant pair)
snmp.device_prof_cRFStatusLastSwactReasonCode{reason}deviceReason code for the last switchover
snmp.device_prof_cRFStatusPeerUnitState{status}deviceCurrent state of the peer redundancy unit
snmp.device_prof_cRFStatusUnitState{status}deviceCurrent state of this redundancy unit

Hardware / Sensor

Metric (chart context)UnitScopeDescription
snmp.device_prof_ciscoEnvMonTemperatureState{status}per temp_indexCurrent state of the testpoint
snmp.device_prof_ciscoEnvMonTemperatureStatusValueCelper temp_indexCurrent measurement of the testpoint
snmp.device_prof_ciscoEnvMonVoltageState{status}per voltage_indexCurrent state of the voltage testpoint
snmp.device_prof_ciscoEnvMonVoltageStatusValuemVper voltage_indexCurrent measurement of the voltage testpoint
snmp.device_prof_entPhySensorOperStatus{status}per sensor_index, rm:sensor_type, rm:sensor_scale, rm:sensor_precisionOperational status of the sensor
snmp.device_prof_entPhySensorValue1per sensor_index, rm:sensor_type, rm:sensor_scale, rm:sensor_precisionMost recent measurement obtained by the agent for this sensor

Hardware / StackWise

Metric (chart context)UnitScopeDescription
snmp.device_prof_cswRingRedundant{status}deviceWhether the stack ring is in a redundant configuration
snmp.device_prof_cswStackPortOperStatus{status}per stack_port_indexState of the stackport
snmp.device_prof_cswSwitchRole{role}per mac_addr, entity_nameRole of a switch in the stack
snmp.device_prof_cswSwitchState{status}per mac_addr, entity_nameCurrent state of a switch

Network / Firewall

Metric (chart context)UnitScopeDescription
snmp.device_prof_cfwConnectionStatCount1per conn_stat_idInteger that contains the value of the resource statistic.
snmp.device_prof_cfwConnectionStatValue{connection}per service_type, stat_typeCurrent status of the resource statistic

Network / IP

Metric (chart context)UnitScopeDescription
snmp.device_prof_ipSystemStatsHCInBcastPkts{packet}/sper ipversionThe number of IP broadcast datagrams received
snmp.device_prof_ipSystemStatsHCInForwDatagrams{forward}/sper ipversionInput datagrams for which this entity was not their final IP destination and for which this entity attempted to find a route to fo…
snmp.device_prof_ipSystemStatsHCInMcastOctetsbit/sper ipversionThe total number of octets received in IP multicast datagrams
snmp.device_prof_ipSystemStatsHCInMcastPkts{packet}/sper ipversionThe number of IP multicast datagrams received
snmp.device_prof_ipSystemStatsHCInOctetsbit/sper ipversionOctets received in input IP datagrams
snmp.device_prof_ipSystemStatsHCInReceives{packet}/sper ipversionInput IP datagrams received
snmp.device_prof_ipSystemStatsHCOutBcastPkts{packet}/sper ipversionThe number of IP broadcast datagrams transmitted
snmp.device_prof_ipSystemStatsHCOutForwDatagrams{packet}/sper ipversionThe number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path…
snmp.device_prof_ipSystemStatsHCOutMcastOctetsbit/sper ipversionThe total number of octets transmitted in IP multicast datagrams
snmp.device_prof_ipSystemStatsHCOutMcastPkts{packet}/sper ipversionThe number of IP multicast datagrams transmitted
snmp.device_prof_ipSystemStatsHCOutOctetsbit/sper ipversionThe total number of octets in IP datagrams delivered to the lower layers for transmission
snmp.device_prof_ipSystemStatsHCOutRequests{packet}/sper ipversionThe total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission
snmp.device_prof_ipSystemStatsHCOutTransmits{packet}/sper ipversionThe total number of IP datagrams that this entity supplied to the lower layers for transmission
snmp.device_prof_ipSystemStatsInAddrErrors{error}/sper ipversionInput IP datagrams discarded due to invalid IP address in header
snmp.device_prof_ipSystemStatsInDiscards{error}/sper ipversionThe number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded
snmp.device_prof_ipSystemStatsInHdrErrors{error}/sper ipversionDiscarded input IP datagrams due to errors in their IP headers
snmp.device_prof_ipSystemStatsInNoRoutes{errors}/sper ipversionInput IP datagrams discarded because no route could be found to transmit them to their destination
snmp.device_prof_ipSystemStatsInTruncatedPkts{error}/sper ipversionInput IP datagrams discarded due to datagram frame not carrying enough data
snmp.device_prof_ipSystemStatsInUnknownProtos{error}/sper ipversionLocally-addressed IP datagrams received successfully but discarded due to an unknown or unsupported protocol
snmp.device_prof_ipSystemStatsOutDiscards{error}/sper ipversionThe number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer…
snmp.device_prof_ipSystemStatsOutFragCreates{fragment}/sper ipversionThe number of output datagram fragments that have been generated as a result of IP fragmentation
snmp.device_prof_ipSystemStatsOutFragFails{error}/sper ipversionThe number of IP datagrams that have been discarded because they needed to be fragmented but could not be
snmp.device_prof_ipSystemStatsOutFragOKs{packet}/sper ipversionThe number of IP datagrams that have been successfully fragmented
snmp.device_prof_ipSystemStatsOutFragReqds{packet}/sper ipversionThe number of IP datagrams that would require fragmentation in order to be transmitted
snmp.device_prof_ipSystemStatsOutNoRoutes{error}/sper ipversionThe number of locally generated IP datagrams discarded because no route could be found to transmit them to their destination
snmp.device_prof_ipSystemStatsReasmFails{error}/sper ipversionThe number of failures detected by the IP re-assembly algorithm
snmp.device_prof_ipSystemStatsReasmOKs{packet}/sper ipversionThe number of IP datagrams successfully reassembled
snmp.device_prof_ipSystemStatsReasmReqds{fragment}/sper ipversionThe number of IP fragments received that needed to be reassembled at this interface

Network / Interface

Metric (chart context)UnitScopeDescription
snmp.device_prof_cieIfResetCount{reset}/sper interfaceNumber of times the interface was internally reset and brought up
snmp.device_prof_ifAdminStatus{status}per interface, interfaceCurrent administrative state of the interface
snmp.device_prof_ifHighSpeedbit/sper interface, interfaceEstimate of the interface's current bandwidth
snmp.device_prof_ifNumber{interface}deviceNumber of network interfaces regardless of their current state present on this system
snmp.device_prof_ifOperStatus{status}per interface, interfaceCurrent operational state of the interface
snmp.device_prof_ipIfStatsHCInBcastPkts{packet}/sper interface_index, ipversionThe number of IP broadcast datagrams received
snmp.device_prof_ipIfStatsHCInDelivers{packet}/sper interface_index, ipversionThe total number of datagrams successfully delivered to IP user-protocols including ICMP
snmp.device_prof_ipIfStatsHCInForwDatagrams{forward}/sper interface_index, ipversionThe number of input datagrams for which this entity was not their final IP destination and for which this entity attempted to find…
snmp.device_prof_ipIfStatsHCInMcastOctetsbit/sper interface_index, ipversionThe total number of octets received in IP multicast datagrams
snmp.device_prof_ipIfStatsHCInMcastPkts{packet}/sper interface_index, ipversionThe number of IP multicast datagrams received
snmp.device_prof_ipIfStatsHCInOctetsbit/sper interface_index, ipversionThe total number of octets received in input IP datagrams, including those received in error
snmp.device_prof_ipIfStatsHCOutBcastPkts{packet}/sper interface_index, ipversionThe number of IP broadcast datagrams transmitted
snmp.device_prof_ipIfStatsHCOutForwDatagrams{packet}/sper interface_index, ipversionThe number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path…
snmp.device_prof_ipIfStatsHCOutMcastOctetsbit/sper interface_index, ipversionThe total number of octets transmitted in IP multicast datagrams
snmp.device_prof_ipIfStatsHCOutMcastPkts{packet}/sper interface_index, ipversionThe number of IP multicast datagrams transmitted
snmp.device_prof_ipIfStatsHCOutOctetsbit/sper interface_index, ipversionThe total number of octets in IP datagrams delivered to the lower layers for transmission
snmp.device_prof_ipIfStatsHCOutRequests{packet}/sper interface_index, ipversionThe total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission
snmp.device_prof_ipIfStatsHCOutTransmits{packet}/sper interface_index, ipversionThe total number of IP datagrams that this entity supplied to the lower layers for transmission
snmp.device_prof_ipIfStatsInAddrErrors{error}/sper interface_index, ipversionThe number of input IP datagrams discarded because the IP address in their IP header's destination field was not a valid address t…
snmp.device_prof_ipIfStatsInDiscards{error}/sper interface_index, ipversionThe number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded
snmp.device_prof_ipIfStatsInHdrErrors{error}/sper interface_index, ipversionThe number of input IP datagrams discarded due to errors in their IP headers
snmp.device_prof_ipIfStatsInNoRoutes{error}/sper interface_index, ipversionThe number of input IP datagrams discarded because no route could be found to transmit them to their destination
snmp.device_prof_ipIfStatsInTruncatedPkts{error}/sper interface_index, ipversionThe number of input IP datagrams discarded because the datagram frame didn't carry enough data
snmp.device_prof_ipIfStatsInUnknownProtos{error}/sper interface_index, ipversionThe number of locally-addressed IP datagrams received successfully but discarded because of an unknown or unsupported protocol
snmp.device_prof_ipIfStatsOutDiscards{error}/sper interface_index, ipversionThe number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer…
snmp.device_prof_ipIfStatsOutFragCreates{fragment}/sper interface_index, ipversionThe number of output datagram fragments that have been generated as a result of IP fragmentation
snmp.device_prof_ipIfStatsOutFragFails{packet}/sper interface_index, ipversionThe number of IP datagrams that have been discarded because they needed to be fragmented but could not be
snmp.device_prof_ipIfStatsOutFragOKs{packet}/sper interface_index, ipversionThe number of IP datagrams that have been successfully fragmented
snmp.device_prof_ipIfStatsOutFragReqds{packet}/sper interface_index, ipversionThe number of IP datagrams that would require fragmentation in order to be transmitted
snmp.device_prof_ipIfStatsReasmFails{error}/sper interface_index, ipversionThe number of failures detected by the IP re-assembly algorithm
snmp.device_prof_ipIfStatsReasmOKs{packet}/sper interface_index, ipversionThe number of IP datagrams successfully reassembled
snmp.device_prof_ipIfStatsReasmReqds{fragment}/sper interface_index, ipversionThe number of IP fragments received that needed to be reassembled at this interface

Network / RTT

Metric (chart context)UnitScopeDescription
snmp.device_prof_rttMonCtrlOperConnectionLostOccurred{status}per rtt_indexIndicates if a connection lost occurred for the RTT operation
snmp.device_prof_rttMonCtrlOperOverThresholdOccurred{status}per rtt_indexIndicates if the latest RTT operation exceeded its configured threshold value
snmp.device_prof_rttMonCtrlOperState{status}per rtt_indexUsed to manage the state of the probe that is implementing conceptual RTT control row.
snmp.device_prof_rttMonCtrlOperTimeoutOccurred{status}per rtt_indexIndicates if a timeout occurred for the RTT operation
snmp.device_prof_rttMonLatestRttOperSense{status}per rtt_indexSense code for the completion status of the latest RTT operation

Network / Routing

Metric (chart context)UnitScopeDescription
snmp.device_prof_ospfIfLsaCount{advertisement}/sper ospf_ip_addr, neighbor_idThe total number of link-local link state advertisements in this interface's link-local link state database
snmp.device_prof_ospfIfState{status}per ospf_ip_addr, neighbor_idThe OSPF Interface State
snmp.device_prof_ospfNbrEvents{event}/sper neighbor_id, neighbor_ipThe number of times this neighbor relationship has changed state or an error has occurred
snmp.device_prof_ospfNbrLsRetransQLen{message}per neighbor_id, neighbor_ipThe current length of the retransmission queue
snmp.device_prof_ospfNbrState{status}per neighbor_id, neighbor_ipThe state of the relationship with this neighbor
snmp.device_prof_ospfVirtIfLsaCount{advertisement}/sper neighbor_idThe total number of link-local link state advertisements in this virtual interface's link-local link state database
snmp.device_prof_ospfVirtIfState{status}per neighbor_idOSPF virtual interface states
snmp.device_prof_ospfVirtNbrEvents{change}/sper neighbor_id, neighbor_ipThe number of times this virtual link has changed its state or an error has occurred
snmp.device_prof_ospfVirtNbrLsRetransQLen{message}per neighbor_id, neighbor_ipThe current length of the retransmission queue
snmp.device_prof_ospfVirtNbrState{status}per neighbor_id, neighbor_ipThe state of the virtual neighbor relationship

Network / TCP

Metric (chart context)UnitScopeDescription
snmp.device_prof_tcpActiveOpens{transition}/sdeviceTCP connections transitioning from CLOSED to SYN-SENT
snmp.device_prof_tcpAttemptFails{failure}/sdeviceFailed TCP connection attempts
snmp.device_prof_tcpCurrEstab{connection}deviceCurrent TCP connections in ESTABLISHED or CLOSE-WAIT state
snmp.device_prof_tcpEstabResets{reset}/sdeviceTCP connections reset from ESTABLISHED/CLOSE-WAIT
snmp.device_prof_tcpHCInSegs{packet}/sdeviceTCP segments received
snmp.device_prof_tcpHCOutSegs{packet}/sdeviceTCP segments sent
snmp.device_prof_tcpInErrs{error}/sdeviceTCP segments received with errors
snmp.device_prof_tcpInSegs{packet}/sdeviceTCP segments received
snmp.device_prof_tcpOutRsts{reset}/sdeviceTCP segments sent with RST flag
snmp.device_prof_tcpOutSegs{packet}/sdeviceTCP segments sent
snmp.device_prof_tcpPassiveOpens{transition}/sdeviceTCP connections transitioning from LISTEN to SYN-RCVD
snmp.device_prof_tcpRetransSegs{retransmit}/sdeviceTCP segments retransmitted

Network / UDP

Metric (chart context)UnitScopeDescription
snmp.device_prof_udpHCInDatagrams{packet}/sdeviceUDP datagrams received
snmp.device_prof_udpHCOutDatagrams{packet}/sdeviceUDP datagrams sent
snmp.device_prof_udpInDatagrams{packet}/sdeviceUDP datagrams received
snmp.device_prof_udpInErrors{error}/sdeviceUDP datagrams received but couldn't be delivered (not due to missing app)
snmp.device_prof_udpNoPorts{error}/sdeviceUDP datagrams received with no app on the destination port
snmp.device_prof_udpOutDatagrams{packet}/sdeviceUDP datagrams sent

Network / VPN

Metric (chart context)UnitScopeDescription
snmp.device_prof_cipSecGlobalActiveTunnels{tunnel}deviceNumber of currently active IPsec Phase-2 Tunnels
snmp.device_prof_cipSecGlobalHcInOctetsBy/sdeviceHigh capacity count of total octets received by all current and previous IPsec Phase-2 Tunnels
snmp.device_prof_cipSecGlobalHcOutOctetsBy/sdeviceHigh capacity count of total octets sent by all current and previous IPsec Phase-2 Tunnels
snmp.device_prof_crasNumDeclinedSessions{session}/sdeviceNumber of session setup attempts declined due to authentication or authorization failure
snmp.device_prof_crasNumSessions{session}deviceNumber of currently active sessions
snmp.device_prof_crasNumSetupFailInsufResources{failure}/sdeviceNumber of session setup attempts failed due to insufficient resources
snmp.device_prof_crasNumUsers{user}deviceNumber of users who have active sessions

System / CPU

Metric (chart context)UnitScopeDescription
snmp.device_prof_cpmCPULoadAvg15min{load_average}per cpu_indexCPU load average over the last 15 minutes
snmp.device_prof_cpmCPULoadAvg1min{load_average}per cpu_indexCPU load average over the last 1 minute
snmp.device_prof_cpmCPULoadAvg5min{load_average}per cpu_indexCPU load average over the last 5 minutes
snmp.device_prof_cpmCPUTotal1minRev%per cpu_indexOverall CPU busy percentage in the last 1 minute period
snmp.device_prof_cpmCPUTotal5minRev%per cpu_indexOverall CPU busy percentage in the last 5 minute period
snmp.device_prof_cpu_usage%per cpu_indexThe current CPU utilization

System / Memory

Metric (chart context)UnitScopeDescription
snmp.device_prof_cempMemPoolLowestFreeByper mem_pool_indexLowest amount of free memory observed since last clear (watermark)
snmp.device_prof_ciscoMemoryPoolFreeByper mem_pool_indexNumber of bytes from the memory pool currently unused
snmp.device_prof_ciscoMemoryPoolLargestFreeByper mem_pool_indexLargest number of contiguous bytes from the memory pool currently unused
snmp.device_prof_ciscoMemoryPoolUsedByper mem_pool_indexNumber of bytes from the memory pool currently in use

System / Uptime

Metric (chart context)UnitScopeDescription
snmp.device_prof_systemUptimesdeviceTime since the system was last rebooted or powered on.

System / VirtualSwitch

Metric (chart context)UnitScopeDescription
snmp.device_prof_cvsChassisUpTimecsper chassis_switch_idUp time for the chassis since last re-initialization

Uncategorized

Metric (chart context)UnitScopeDescription
snmp.device_prof_cdpGlobalDeviceIddevice
snmp.device_prof_cdpGlobalDeviceIdFormatdevice
snmp.device_prof_cdpGlobalHoldTimedevice
snmp.device_prof_cdpGlobalLastChangedevice
snmp.device_prof_cdpGlobalMessageIntervaldevice
snmp.device_prof_cdpGlobalRundevice
snmp.device_prof_cdpInterfaceEnableper cdp_if_index
snmp.device_prof_cdpInterfaceMessageIntervalper cdp_if_index
snmp.device_prof_cdpInterfaceNameper cdp_if_index
snmp.device_prof_lldpStatsRemTablesAgeoutsdevice
snmp.device_prof_lldpStatsRemTablesDeletesdevice
snmp.device_prof_lldpStatsRemTablesDropsdevice
snmp.device_prof_lldpStatsRemTablesInsertsdevice
snmp.device_prof_lldpStatsRemTablesLastChangeTimedevice
snmp.device_prof_lldpStatsRxPortAgeoutsTotalper lldp_loc_port_num
snmp.device_prof_lldpStatsRxPortFramesDiscardedTotalper lldp_loc_port_num
snmp.device_prof_lldpStatsRxPortFramesErrorsper lldp_loc_port_num
snmp.device_prof_lldpStatsRxPortFramesTotalper lldp_loc_port_num
snmp.device_prof_lldpStatsRxPortTLVsDiscardedTotalper lldp_loc_port_num
snmp.device_prof_lldpStatsRxPortTLVsUnrecognizedTotalper lldp_loc_port_num
snmp.device_prof_lldpStatsTxPortFramesTotalper lldp_loc_port_num

Do you have any feedback for this page? If so, you can open a new issue on our netdata/learn repository.