How to monitor connections dropped and rejected on the PIX/ASA firewall?

fjmendonca · ‎02-01-2010

I need to monitor by SNMP the connections dropped and rejected on the PIX and ASA firewall. Is it possible?

Collin Clark · ‎02-01-2010

You can do it via the local buffer or more preferred, syslog. Please refer to the attached image for the logging levels.

Hope that helps.

fjmendonca · ‎02-02-2010

I need to monitor this information through a management tool. I want to monitor through SNMP OID, could you help me with the correct OID?

Collin Clark · ‎02-02-2010

I highly doubt there is an OID for that since it's dropped packets. Your best option is to send a trap to your NMS.