Cisco Cisco Firepower Management Center 4000
55-21
FireSIGHT System User Guide
Chapter 55 Using Health Monitoring
Configuring Health Policies
•
To save your changes to this module and return to the Health Policy page, click
Save Policy and Exit
.
•
To return to the Health Policy page without saving any of your settings for this module, click
Cancel
.
•
To temporarily save your changes to this module and switch to another module’s settings to modify,
select the other module from the list at the left of the page. If you click
select the other module from the list at the left of the page. If you click
Save Policy and Exit
when you
are done, all changes you made will be saved; if you click
Cancel
, you discard all changes.
You must apply the health policy to the appropriate devices if you want your settings to take effect. See
for more information.
Configuring Memory Usage Monitoring
License:
Any
Use the Memory Usage health status module to set memory usage limits. The module calculates free
memory by considering free memory, cached memory, and swap memory. If the memory usage on the
monitored appliance exceeds the Warning limit, the status classification for that module changes to
Warning. If the memory usage on the monitored appliance exceeds the Critical limit, the status
classification for that module changes to Critical. That status data feeds into the health monitor.
memory by considering free memory, cached memory, and swap memory. If the memory usage on the
monitored appliance exceeds the Warning limit, the status classification for that module changes to
Warning. If the memory usage on the monitored appliance exceeds the Critical limit, the status
classification for that module changes to Critical. That status data feeds into the health monitor.
For appliances with more than 4GB of memory, the preset alert thresholds are based on a formula that
accounts for proportions of available memory likely to cause system problems.
accounts for proportions of available memory likely to cause system problems.
Note
On >4GB appliances, because the interval between Warning and Critical thresholds may be very narrow,
Cisco recommends that you manually set the
Cisco recommends that you manually set the
Warning Threshold %
value to
50
. This will further ensure
that you receive memory alerts for your appliance in time to address the issue.
The maximum percentage you can set for either limit is 100 percent, and the Critical limit must be higher
than the Warning limit.
than the Warning limit.
Note
If you apply an access control policy with many FireSIGHT features enabled (such as security
intelligence, file capture, intrusion policies with many rules, or URL filtering), some lower-end
ASA FirePOWER devices may generate intermittent memory usage warnings, as the device’s memory
allocation is being used to the fullest extent possible.
intelligence, file capture, intrusion policies with many rules, or URL filtering), some lower-end
ASA FirePOWER devices may generate intermittent memory usage warnings, as the device’s memory
allocation is being used to the fullest extent possible.
To configure Memory Usage health module settings:
Access:
Admin/Maint
Step 1
On the Health Policy Configuration page, select
Memory Usage
.
The Health Policy Configuration — Memory Usage page appears.
Step 2
Select
On
for the
Enabled
option to enable use of the module for health status testing.
Step 3
In the
Critical Threshold %
field, enter the percentage of memory usage that should trigger a critical health
status.
Step 4
In the
Warning Threshold %
field, enter the percentage of memory usage that should trigger a warning
health status.
Step 5
You have three options:
•
To save your changes to this module and return to the Health Policy page, click
Save Policy and Exit
.