Cisco Cisco Web Security Appliance S690 User Guide
18-11
AsyncOS 8.7 for Cisco Web Security Appliances User Guide
Chapter 18 Generate Reports to Monitor End-user Activity
SNMP Monitoring
Hardware Traps
Status change traps are sent when the status changes. Fan Failure and high temperature traps are sent
every 5 seconds. The other traps are failure condition alarm traps - they are sent once when the state
changes (healthy to failure). Temperatures within 10 per cent of the critical value may be a cause for
concern.
every 5 seconds. The other traps are failure condition alarm traps - they are sent once when the state
changes (healthy to failure). Temperatures within 10 per cent of the critical value may be a cause for
concern.
Note
Failure condition alarm traps represent a critical failure of the individual component, but may not cause
a total system failure.
a total system failure.
SNMP Traps
SNMP provides the ability to send traps, or notifications, to advise an administration application when one
or more conditions have been met. Traps are network packets that contain data relating to a component of
the system sending the trap. Traps are generated when a condition has been met on the SNMP agent (in this
case, the Cisco Web Security Appliance appliance). After the condition has been met, the SNMP agent then
forms an SNMP packet and sends it over port 162, the standard SNMP trap port. In the example below, the
trap target of
or more conditions have been met. Traps are network packets that contain data relating to a component of
the system sending the trap. Traps are generated when a condition has been met on the SNMP agent (in this
case, the Cisco Web Security Appliance appliance). After the condition has been met, the SNMP agent then
forms an SNMP packet and sends it over port 162, the standard SNMP trap port. In the example below, the
trap target of
10.1.1.29
and the Trap Community string are entered. This is the host running the SNMP
management console software that will receive the SNMP traps from the appliance.
You can configure SNMP traps (enable or disable specific traps) when you enable SNMP for an
interface. To specify multiple trap targets: when prompted for the trap target, you may enter up to 10
comma separated IP addresses.
interface. To specify multiple trap targets: when prompted for the trap target, you may enter up to 10
comma separated IP addresses.
CLI Example
In this example, the
snmpconfig
command is used to enable SNMP on the “PublicNet” interface on port
161. A passphrase for version 3 is entered and then re-entered for confirmation. The system is configured
to service version 1 and 2 requests, and the community string
to service version 1 and 2 requests, and the community string
public
is entered for GET requests from
those versions 1 and 2. The trap target of
10.1.1.29
is entered. Finally, system location and contact
information is entered.
example.com> snmpconfig
Current SNMP settings:
SNMP Disabled.
Choose the operation you want to perform:
- SETUP - Configure SNMP.
[]> setup
Do you want to enable SNMP? [N]> y
Please choose an IP interface for SNMP requests.
1. Management (192.168.1.1/24: wsa01-vmw1-tpub.qa)
Model
High Temp
(Ambient)
(Ambient)
Fan Failure
Power Supply
RAID
Link
S160/S350/S360/S650
/S660
/S660
47C
0 RPMs
Status Change
Status Change
Status Change