Cisco Firepower

Monitor Cisco Firepower devices using SNMP

Extension

Free trial Documentation

Product information
Release notes

Overview

The Cisco Firepower extension uses SNMP to collect metrics from your Cisco Firepower devices. Metric data is collected each minute to track the performance and health of your Firepower devices. Dynatrace's Unified Analysis screens provide at-a-glance access and analysis for your Ops, DevOps and IT Admins.

Subscribe to new releases

Copy to clipboard

Extension content

Content typeNumber of items included

alerts

2

screen chart groups

14

screen message cards

8

screen layout

8

screen injections

1

list screen layout

4

document dashboard

1

metric metadata

27

screen entities lists

4

metric query

1

screen metric tables

1

generic type

6

screen properties

5

screen actions

2

dashboards

1

generic relationship

5

screen dql table

4

Feature sets

Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual feature sets can be activated and deactivated by your administrator during configuration.

Feature setsNumber of metrics included

Metric name	Metric key	Description	Unit
-	com.dynatrace.extension.network_device.sysuptime	-	-
-	com.dynatrace.extension.network_device.memory_used	-	-
-	com.dynatrace.extension.network_device.memory_free	-	-
-	com.dynatrace.extension.network_device.cpu_usage	-	-
-	com.dynatrace.extension.network_device.if.bytes_in.count	-	-
-	com.dynatrace.extension.network_device.if.bytes_out.count	-	-
-	com.dynatrace.extension.network_device.if.in.errors.count	-	-
-	com.dynatrace.extension.network_device.if.in.discards.count	-	-
-	com.dynatrace.extension.network_device.if.out.errors.count	-	-
-	com.dynatrace.extension.network_device.if.out.discards.count	-	-
-	com.dynatrace.extension.network_device.if.status	-	-
HA Status	snmp.cisco.firepower.ha.status	This object contains the current HA status of the resource.	Count

Metric name	Metric key	Description	Unit
Interface speed	snmp.cisco.firepower.interface.ifHighSpeed	An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of n' then the speed of the interface is somewhere in the range of n-500,000' to `n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.	MegaBitPerSecond
Octets received	snmp.cisco.firepower.interface.ifInOctets.count	The total number of octets received on the interface including framing characters	Count
Octets transmitted	snmp.cisco.firepower.interface.ifOutOctets.count	The total number of octets transmitted out of the interface including framing characters	Count
Inbound errors	snmp.cisco.firepower.interface.ifInErrors.count	Number of inbound packets/transmission units with errors	Count
Inbound discards	snmp.cisco.firepower.interface.ifInDiscards.count	Number of inbound packets discarded	Count
Outbound errors	snmp.cisco.firepower.interface.ifOutErrors.count	Number of outbound packets/transmission units with errors	Count
Outbound discards	snmp.cisco.firepower.interface.ifOutDiscards.count	Number of outbound packets discarded	Count

Metric name	Metric key	Description	Unit
Declined connections	snmp.cisco.firepower.connections.cufwConnGlobalNumResDeclined	The number of connections which were attempted to be setup but which were declined due to non-availability of required resources. This value is accumulated from the last reboot of the firewall.	Count
Active connections	snmp.cisco.firepower.connections.cufwConnGlobalNumActive	The number of connections which are currently active.	Count
Connection rate (per 1 minute)	snmp.cisco.firepower.connections.cufwConnGlobalConnSetupRate1	The averaged number of connections which the firewall establishing per second, averaged over the last 60 seconds.	Count
UDP connection rate (per 1 minute)	snmp.cisco.firepower.connections.cufwConnGlobalConnSetupRate1.udp	The averaged number of UDP connections which the firewall establishing per second, averaged over the last 60 seconds.	Count
TCP connection rate (per 1 minute)	snmp.cisco.firepower.connections.cufwConnGlobalConnSetupRate1.tcp	The averaged number of TCP connections which the firewall establishing per second, averaged over the last 60 seconds.	Count

Metric name	Metric key	Description	Unit
Memory used	snmp.cisco.firepower.memory.used	Indicates the number of bytes from the memory pool that are currently used on the physical entity.	Byte

Metric name	Metric key	Description	Unit
Total amount of disk space for the specified file system	snmp.cisco.firepower.disk.cfprSmDiskFileSystemTotalKb	-	KiloByte
Used disk space for the specified file system	snmp.cisco.firepower.disk.cfprSmDiskFileSystemUsedKb	-	KiloByte

Metric name	Metric key	Description	Unit
Total amount of memory in kB	snmp.cisco.firepower.cfprSmMonitorMemTotalKb	-	KiloByte
Total amount of used memory in kB	snmp.cisco.firepower.cfprSmMonitorMemUsedKb	-	KiloByte
Used memory pool	snmp.cisco.firepower.memory.cempMemPoolUsed	Indicates the number of bytes from the memory pool that are currently in use by applications on the physical entity.	Byte
Free memory pool	snmp.cisco.firepower.memory.cempMemPoolFree	Indicates the number of bytes from the memory pool that are currently not in use by applications on the physical entity.	Byte

Metric name	Metric key	Description	Unit
1550 (Ethernet) blocks	snmp.cisco.firepower.blocks.ethernet	Used to store Ethernet packets for processing through the threat defense device	Count
80 (TCP intercept) blocks	snmp.cisco.firepower.blocks.tcpintercept	Used in TCP intercept to generate acknowledgment packets and for failover hello messages	Count

Metric name	Metric key	Description	Unit
CPU Usage - 1 min	snmp.cisco.firepower.cpu.total.1min	The overall CPU busy percentage in the last minute.	Percent
CPU Usage - 5 min	snmp.cisco.firepower.cpu.total.5min	The overall CPU busy percentage in the last 5 minute period.	Percent

Metric name	Metric key	Description	Unit
Fault severity	snmp.cisco.firepower.fault.severity	0 => 'cleared', 1 => 'info', 2 => 'condition', 3 => 'warning', 4 => 'minor', 5 => 'major', 6 => 'critical'	State

Metric name	Metric key	Description	Unit
CRAS Active Sessions	snmp.cisco.firepower.asa.cras.num_sessions	The number of currently active sessions. A session is 'active' if it is ready to carry application traffic.	Count

Related to Cisco Firepower

Generic Cisco Device

Monitor Cisco devices using SNMP to feed Dynatrace with metrics and alerts.

Generic network device

Gain insights into the performance of your network devices.

Full version history

To have more information on how to install the downloaded package, please follow the instructions on this page.

ReleaseDate

Full version history

v.1.3.5

Fixes

Fix for snmp.cisco.asa.cras.num_sessions metric

This version requires a minimum cluster version of 1.314.0

Full version history

⚠️ IMPORTANT CHANGE:

Metrics in "default" feature set will always be enabled and cannot be disabled. These metrics are mandatory. Take extra caution configuring devices and interfaces for which you are collecting data. Make use of Interface filters to limit the number of interfaces, otherwise, all interfaces on the device will be collected by default. In case you do not wish to collect interfaces on your device, enter $eq(!) in the "Interface Name" filter field on the Feature Sets screen during configuration.

These metrics introduced into the "default" feature set are per interface and cannot be disabled but can be filtered.

com.dynatrace.extension.network_device.if.bytes_in.count
com.dynatrace.extension.network_device.if.bytes_out.count
com.dynatrace.extension.network_device.if.in.errors.count
com.dynatrace.extension.network_device.if.in.discards.count
com.dynatrace.extension.network_device.if.out.errors.count
com.dynatrace.extension.network_device.if.out.discards.count

Other changes:

Added Platform dashboard
Added dt.security_context to entities
Added Platform unified analysis screens
Added snmp.cisco.asa.cras.num_sessions metric and related UA chart

Full version history

Initial release

Discover recent additions to Dynatrace

Problems

Analyze abnormal system behavior and performance problems detected by Davis AI.

Logs

Explore all your logs without writing a single query.

Security Investigator

Fast and precise forensics for security and logs on Grail data with DQL queries.

Business Flow

Track, analyze, and optimize your critical business processes.

Cost & Carbon Optimization

Track, analyze, and optimize your IT carbon footprint and public cloud costs.

Davis Anomaly Detection

Detect anomalies in timeseries using the Davis AI

Analyze your data

Understand your data better with deep insights and clear visualizations.

Notebooks

Create powerful, data-driven documents for custom analytics and collaboration.

Dashboards

Transform complex data into clear visualizations with custom dashboards.

Automate your processes

Turn data and answers into actions, securely, and at scale.

Workflows

Automate tasks in your IT landscape, remediate problems, and visualize processes

Jira

Create, query, comment, transition, and resolve Jira tickets within workflows.

Slack

Automate Slack messaging for security incidents, attacks, remediation, and more.

Secure your cloud application

See vulnerabilities and attacks in your environment.

Security Overview

Get a comprehensive overview of the security of your applications.

Code-Level Vulnerabilities

Detect vulnerabilities in your code in real time.

Security Posture Management

Detect, prioritize, and remediate security and compliance findings with SPM.

Threats & Exploits

Understand, triage, and investigate detection findings and alerts.

Are you looking for something different?

We have hundreds of apps, extensions, and other technologies to customize your environment

Leverage our newest innovations of Dynatrace Saas

Kick-start your app creation

Kick-start your app creation

Whether you’re a beginner or a pro, Dynatrace Developer has the tools and support you need to create incredible apps with minimal effort.

Go to Dynatrace Developer

Upgrading from Dynatrace Managed to SaaS

Upgrading from Dynatrace Managed to SaaS

Drive innovation, speed, and agility in your organization by seamlessly and securely upgrading.

Log Management and Analytics

Log Management and Analytics

Innovate faster and more efficiently with unified log management and log analytics for actionable insights and automation.