Cisco Firewall :: Bandwidth Monitoring In PIX 535?
Sep 25, 2011Is there a way I can generate bandwidth reports on Cisco PIX 535 ?
View 1 RepliesIs there a way I can generate bandwidth reports on Cisco PIX 535 ?
View 1 RepliesI am using ASA 5510 Firewall and i have established VPN tunnels too , now i want to Monitor the bandwidth utilization , i have installed PRTG Monitor application and want to add the firewall , how to enable the SNMP in ASA .
View 1 Replies View RelatedI was wondering if there is a way to monitor the total bandwidth available at any given time? My ISP claims and is charging me for a certain amount of bandwidth but I suspect that during the day I am getting much less.
I would like to track available bandwidth continuously (or every 5, 10, 15 minutes) and log that data so I can show them the results. I'm on a Mac 10.7 but can use Windows XP also.
I have a Cisco 1184 with Hwic 1-t (IOS 12.4(15)T12 ). i want monitoring average load of my HDSL. How to can i monitoring my bandwith in upload and in download for WAN interface ?
View 3 Replies View RelatedI'm working with two Catalyst 2960 switches and I would like to know if there is a way to monitor bandwidth on individual ports. Ideally I would like to have one graph showing a bandwidth usage reading on each port. I tried using the Network Assistant to accomplish this, but I was only able to view one port at a time. I also tried using a traffic graphing program from Paessler, but a MIB file is needed to allow the program to connect to the switch. When I ran a search on the network management page the 2960 was not on the list for MIB supported products. Is this type of graph possible to do?
View 2 Replies View RelatedDoes the SGE2000 supports NetFlow? I've checked the Cisco docs and also called Cisco support to which no one has been able to answer me.
Anyhow, just in case it doesn't support NetFlow, how to be able to set up something that would be able to check the bandwidth usage on each port?
I've got a problem where I think the SGE2000 switch is failing when I pump around 190~200Mbps through x2 of the ports (Server A on port 1=130Mbps and Server B on port 2=60Mbps) of Multicast traffic (UDP). I can measure the output from the Streaming servers that provide the multicast content, thats how I know the input to the switch and I know that there are no packets lost or any errors departing from the servers, yet when I increase server B to say 80Mbps, I get break up and all sorts of problems on the client end STBs and it is happening on the multicast content provided by Server A too which is a different source, so I'm 99.9% sure its a SGE2000 switch problem which is why I'd like to monitor it somehow.
We have a Cisco ASA 5520 supporting multiple VPNs - both remote-access and Lan-to-Lan. We would like to monitor the bandwidth utilization of the IPSec Lan-to-Lan tunnels.
View 3 Replies View RelatedI have a ea4500 router with 3 pc's, 4 iphones, 2 playstations, ipad, ps vita, house cat, and a printer all wired into the internet. There are four of us in the family all using the internet but I suspect one of us is using considerably more than the other. I live in the country and my current isp has us on the max available account - 50 gigs / month. Lately we have been hitting 45 in less than 3 weeks into the month. I would like to know which of the things connected or which person is using the most of the bandwidth up. Is there a program that doesn't require a phd in quantum physics and networking that can monitor this for me and spit out a report.
View 9 Replies View RelatedHow I can actively monitor the interfaces and overall status of 2 x ASA 5500s in an Active/Standby configuration?
I can setup monitoring of the interfaces on the Active member but I'm not sure how to manage the Standby member?
how to configure ip sla monitoring on asa ver 7.0 (6) ?
View 4 Replies View RelatedI have an ASA 5500 Firewall. I need to figure out how to log all events using Port 25 to determine if there are any rogue devices on our network. I was trying to figure out how to do this via the Real-Time Monitoring (filter) but have had no success.
View 1 Replies View RelatedI am new to the PIX firewall. And recently implemented the PIX 506e in my network. I wants to know how we can monitor the system that is generating the more traffic on Network through Firewall.
View 4 Replies View RelatedI have a question regarding failover monitoring on the ASA5505 in an active/standby configuration.
I understand that on the 5505 you create VLAN interfaces and then assign the VLANs to the 5505 switchports. With failover configured on the 5505, the VLAN interface names are monitored. For example, VLAN 100 interface named Inside is assigned to ethernet0/1, switchport mode access. When issuing a show failover command the output will show the monitor status of interface Inside..
Does failover monitor the VLAN virtual interface only? Does failover also monitor the link status of the ethernet0/1 switchport?
We have one pair Cisco ASA 5505 located in different location and there are two point to point links between those two locations, one for primary link (static route w/ low metric) and the other for backup (static route w/ high metric). The tracked options is enabled for monitoring the state of the primary route. the detail parameters regarding options as below,
Frequency: 30 seconds Data Size: 28 bytes
Threshold: 3000 milliseconds Tos: 0
Time out: 3000 milliseconds Number of Packets: 8
[code]....
I'm not sure if the setting is so sensitive that the secondary static route begins to work right away, even when some small link flappings occur. What is the best practice to set those parameters up in the production environment. How can we specify the reasonanble monitoring options to fit our needs.
I am interested in gathering cumulative threat-detection statistics from an ASA running 8.3, and displaying number of attacks over time. I am already capturing traffic information via netflow, but am interested in getting threat information.
Is there a way to capture the statistics via SNMP or any other method?
I am trying to monitor my ASA 5505. This asa is connect via a ip-sec tunnel to our network. I have no problems with snmp monitoring devices behind the ASA, but when trying to monitor the asa itself I do not get a SNMP response.
View 2 Replies View RelatedWhat are considered the best practices for monitoring ASA's--specifically the 5510 with Sec+ License.
My current monitoring application keeps reporting issues with outbound interface buffers being too high, but there are not any performance issues and I believe the thresholds are just set absurdly low.
i have a couple of ASA 5510 in Active/Failover configuration. Failover LAN is configured on management0/0 e the ASA are connected with a back-to-back direct cable.
ASA has an interface in access mode inside with standby ip address and show failover is compliant with expected result in show failover (Normal)
ASA-PRIMARY# sh failover Failover On Failover unit PrimaryFailover LAN Interface: LANfailover Management0/0 (up)Unit Poll frequency 1 seconds, holdtime 15 secondsInterface Poll frequency 5 seconds, holdtime 25 secondsInterface Policy
[Code]....
We are using MS System Center Operations Manager to monitor network devices. We are trying to monitor our Cisco ASA 5525-X firewall interfaces.
We have a generic management pack installed that seems to work for parts of the 5525. We can see performance info for IF-4 but none of the other interfaces.
Our Management Pack is a generic Cisco Adaptive Security Appliance Version 9.1(1) management pack.
Is there a management pack that is specifically for this Cisco firewall?
I have a 5520 ASA running 8.2(1) and ASDM 6.2(1). The ASA has been running for 223 days without issue. Today it stopped showing real time status on the Device Dashboard from within ASDM. All of the graphs state "Lost connection to Firewall."I try to manually reconnect but it will not. I have tried on a couple different computers and cannot get the monitoring connection to work.It is a very busy firewall and I will have to schedule for a restart (which I was thinking of doing) even though I do not see a memory issue as per snip below. I don't want to restart unless it is the best option.
View 13 Replies View RelatedLENOVO G580 - i5,4gb ram, 500gb harddisk , network adapters- atheros ar8162 pcie- fast ethernet controller, broadcom 802.11n network adapter.i am using quickheal total secutity for a total antivirus protection.My problem is that whenever i connect my laptop using a d-link crossover cable to connect to my desktop the connection establishes successfully but on browsing or copying data the system gives a bsod error.initially i didn't got a clue as to what causes the error but then i figured out that uninstalling q-heal solves the problem an reintalling it again causes the same problem.ive tried using different versions/products of qiuckheal but all end up generating a blue screen error.not only this , whenever i use a software that has some thing to do with network like monitoring appliction wise bandwith or something it also ends up in bsod.
View 5 Replies View RelatedI'm currently implementing Microsoft System Center 2012 Operations Manager, the curent stage of the project is to add the network devices to SCOM via SNMP in order to monitor them, I am able to add them all and monitor; however, my ASA 5510, although SCOM discovers the ASA via SNMP and adds it to the network monitoring list, it loses SNMP connectivy every 30 minutes, and 15 later it reconnect with SCOM, then after another 15 minutes it loses the connection again, and so on and so for.
View 1 Replies View Relatedhow much bandwidth I can drive through a ASA 5520-VPN Plus running 8.2(5).
View 3 Replies View RelatedWere running an ASA5510 with multiple IPSEC VPN clients over a 100Mb leased line. At the moment we have about 10 active clients however we are looking at gearing up to about 100 clients.Question is, is there a known method for calculating the required bandwidth for this number of clients or indeed obtaining metrics from already connected clients with this calculation. We have tried a few monitoring products, most notably Solar winds, however none of the products we have tried seems to be able to give us the throughput of the individual VPN connections to assist with our calcs....
View 1 Replies View RelatedI have a cisco ASA firewall 5510.Just i have configurd for 1st port as nameif ouside witch public ip, 2nd port as a nameif inside with local ip, and done the nating, dhcp and dns. now i am able to get internet from inside port, which is getting dhcp.up to that it is ok.
And I want to restrict bandwidh 1Mbps for local port (2nd port) how to config 1Mbps banwidth allocation for port no 2, I mean nameif inside should have 1Mbps limet.
I have 20 mbps internet link and I have ASA 5505 . I have to divide this bandwidth 10-10 mbps each for Voice and Data . So that both can work properly. because when I am using it for both on same interface, I am getting Voice disturbance..
View 1 Replies View Relatedi have 16MB internet speed, i want to give inside interface in my ASA only 2MB to use how can i assign it ?
ASA Version 8.2(5) !hostname ConcordeASAenable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface
[Code].....
How to allocate bandwidth for a certain host or service in Cisco ASA 5510 Firewall using ASDM? For instance, I would like to dedicate 2MB for H323 service (Video Conference Call).
View 1 Replies View RelatedWe have 10MB dedicated Internet BW and want to run VC device and due to heavy traffic and BW high utilization at peak hours, VC performance is not sufficient. We would like to reserve 2MB for VC device. How much possible to fix up this configuration in ASA5505 version disk0:/asa724-k8.bin [URL]
View 5 Replies View RelatedWhen I have a computer directly connected to the Cable Modem I get 9.84MB Down and 1MB Up. When I put it behind the ASA 5505 with policing on the interface, I only get 4MB Down and 660Kb Down.What I'm wanting to do is setup this up to enable my VoIP to have a higher priority and shave 128kon both the Up/Down for the VoIP traffic. I also want to make sure I don't exceed the inbound and outbound thresholds.I''m using a 5505 Security Plus?
View 3 Replies View RelatedI have a 20/20 MB circuit and an ASA 5510 and I am able to setup policing were the interace gets 512k down and 128k up so when I conduct a speed test with one user I get 512k and 128k and when I conduct a speed test with two users each gets 256k and 64k. [code] What I want to happen is that each user gets 512k and 128k until a saturation point is hit and then I want the ASA to slow all users down equally.
View 1 Replies View RelatedI'm having a bit trouble to limit the bandwidth on outgoing traffic with a Cisco ASA 5505.
In my case I want to limit the bandwidth to 31mbit/s up and down on the outside interface. but with my current configuration, just the download rate gets limited to 31mbit/s when I do a tptest. and the upload is around 40/50mbit.
Here is the policy configuration,
access-list outside_bw extended permit ip any any
class-map outside_bw
match access-list outside_bw
[Code].....
I'm working in my lab trying to do proof of concept for traffic policing on the ASA 5510 running 8.0(4). I have two laptops running Ubuntu one on the outside and one on the inside. Both laptops have 100Mbps interfaces. My tests consists of downloading a file from one laptop using HTTP. Without any QoS I can see speeds close to 100Mbps which I would expect. On a side note, try using XP and you won't come close to those speeds. Anyhow, I implement policing using the config below and expect to see the max rate on the laptops during the transfer max out close to the CIR. However, I see speeds much higher on the laptops.
When I set the CIR to 10000 bps with bc at 1500 bytes I get speeds that range from 300Kbps to 700Kbps. I would expect to see speeds max out at the CIR which would be 10Kbps.I'm having a hard time understanding why my numbers don't match.