Filter
Top Products
68-27
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 68 Health and Performance Monitoring
Monitoring Devices
–
Other Details – A listing of certificate and TrustPoint details.
See Managing Monitored Devices, page 68-5 for information about selecting devices for VPN
monitoring.
Monitoring Views: VPN, RA and S2S
The HPM Monitoring display presents a variety of device- and VPN-related data views, as described in
HPM Window: Monitoring Display, page 68-23. These include the Remote Access Users and
Site-to-Site Tunnels views, which unlike the other views, are simply tables of current users and tunnels.
See Managing Monitored Devices, page 68-5 for information about selecting devices for VPN
monitoring.
In both of these views, you can resize the table columns, you can show and hide columns, and the column
headings are menus you can use to filter the table by hiding or showing entries according to chosen
parameters. See Showing and Hiding Table Columns, page 68-8 for more information about these
options.
The Remote Access Users view lists the remote-access users currently logged into network resources via
the devices being monitored by HPM. Note that remote-access user information is updated every 20
minutes (for normal monitoring; for Priority monitoring the interval is 15 minutes), rather than the five
minutes that is standard for the other views. Also, no historical or trending data is available for
remote-access users.
Further, you may notice a mismatch between RA user count in the VPN Summary view and the Remote
Access Users view. This is because the VPN Summary is updated at ten-minute/five-minute
(normal/Priority) intervals.
Tip In the Remote Access Users view, you can right-click a user entry and choose Log Off User from the
pop-up menu to terminate that remote-access connection.
The Site-to-Site Tunnels view provides current VPN tunnel information through all monitored devices.
Note that to enable tunnel Up/Down alerts for a device or context, you must configure SNMPv3 on the
device, as described in SNMP Credentials Dialog Box, page 3-47.
For clusters of ASA 9.0+ devices, information is shown for the master device only, since VPN processing
is not load-balanced across the nodes and is thus limited to centralized support in the cluster.
Note VPN polling occurs on a fixed time interval, so it is not possible to log status changes within that time
interval. For example, if a site-to-site tunnel goes down immediately after polling and comes back up
just before the next poll, that status change cannot be detected.
Exporting HPM Data
You can save a “snapshot” of the device-status information in the current View as a PDF, HTML, or CSV
(comma-separated values) file. The following steps describe exporting the current View data in either a
PDF, HTML, or CSV file.
Related Topics
• HPM Window, page 68-6
• Showing and Hiding Table Columns, page 68-8