Cisco Cisco Firepower Management Center 4000

Page of 1844
C H A P T E R
 
55-1
FireSIGHT System User Guide
 
55
Using Health Monitoring
The health monitor provides numerous tests for determining the health of an appliance from the Defense 
Center. You can use the health monitor to create a collection of tests, referred to as a health policy, and 
apply the health policy to one or more appliances. You can create one health policy for every appliance 
in your system, customize a health policy for the specific appliance where you plan to apply it, or use 
the default health policy. You can also import a health policy exported from another Defense Center.
The tests, referred to as health modules, are scripts that test for criteria you specify. You can modify a 
health policy by enabling or disabling tests or by changing test settings, and you can delete health 
policies that you no longer need. You can also suppress messages from selected appliances by 
blacklisting them.
The tests in a health policy run automatically at the interval you configure. You can also run all tests, or 
a specific test, on demand. The health monitor collects health events based on the test conditions 
configured. Optionally, you can also configure email, SNMP, or syslog alerting in response to health 
events.
On the Defense Center, you can view health status information for the entire system or for a particular 
appliance. Fully customizable event views allow you to quickly and easily analyze the health status 
events gathered by the health monitor. These event views allow you to search and view event data and 
to access other information that may be related to the events you are investigating. 
You can also generate troubleshooting files for an appliance if you are asked to do so by Support.
See the following sections for more information:
  •
  •
  •
  •
  •
  •
  •
Understanding Health Monitoring
License: 
Any