Filter
Top Products
68-2
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 68 Health and Performance Monitoring
Health and Performance Monitor Overview
• Report Manager – Collects, displays and exports network usage and security information for ASA
and IPS devices, and for remote-access IPsec and SSL VPNs. These reports aggregate security data
such as top sources, destinations, attackers, victims, as well as security information such as top
bandwidth, duration, and throughput users. Data is also aggregated for hourly, daily, and monthly
periods. See Chapter 67, “Managing Reports” for more information.
• Health and Performance Monitor (HPM) – Monitors and displays key health, performance and
VPN data for ASA and IPS devices in your network. This information includes critical and
non-critical issues, such as memory usage, interface status, dropped packets, tunnel status, and so
on. You also can categorize devices for normal or priority monitoring, and set different alert rules
for the priority devices.
You can add notes to displayed alerts, you can “acknowledge” them, and you can clear them. When
an alert is cleared, it is removed from the Alerts display; however, the alert information is retained
in a database for 30 days. See Alerts: Acknowledging and Clearing, page 68-38 for more
information about adding notes, and acknowledging and clearing alerts.
Note You can use the Alerts History window to access and view previously cleared alerts, as
described in Alerts: History, page 68-39.
This section contains the following topics:
• Trend Information, page 68-2
• Monitoring Multiple Contexts, page 68-3
Trend Information
The Health and Performance Monitor periodically polls monitored devices for status and performance
data. This information is used for alert generation, and to display real-time views and historical trends
based on aggregated data.
Trends are displayed graphically for a specific set of metrics. Each trend for the currently selected device
is represented as a graph generated for a chosen time interval. Comparing current values with the weekly
averages for CPU and memory usage, for example, can provide an operational context for the selected
device. Available trend intervals for monitored devices are one hour, 24 hours, and one week.
Metrics used for generating trends include:
• CPU usage
• Memory usage (only for single-context devices)
• Connections per second (firewall devices)
• Translations per second (firewall devices)
• Inspection load (IPS devices)
• Missed packets as a percentage (IPS devices)
• Number of VPN tunnels
• Number of RA VPN sessions
• Total VPN throughput
• Firewall throughput
• Total dropped packets (firewall interfaces)