Tuesday, January 12, 2016

Monitor Failover HA feature in Cisco Firewals ASA, FWSM and PIX

This post will answer the question: "How can I monitor failover in my Cisco Firewalls?"

Quick answer:
I do it with a script that will keep history of failover and will send an email every time there is a failure.
You can find the script here:
https://github.com/pmachete/ciscoFirewallFailoverMonitor

In an operation perspective you will want to know changes and not status. Status is nice but if there is a failure that lasts for some hours, then you need a system that is not always telling you that something is wrong. You want to know it only at the time it happens. Email can be a solution. A trigger to an operation ticket might be even better.

No comments: