hey friends,
I am looking for a free open source software (web based or application) through which I can monitor the Pix Firewall. What it should show Interface status or traffic , VPN Connectivity status, CPU Status, Memory Status etc. I am also running DHCP server on Pix Firewall (due to some reasons) If it can monitor that also means showing how many IPAddresses has been assigned, to whom, what is the lease time etc. then it will be very good.
I know about cacti but for VPN Connectivity status one has to use telnet which I don't want to use and I don't know about monitoring DHCP server through it. Is there any other tool through which I can monitor Pix Firewaall ?
I am using Centos4.0
Thanks & Regards
Ankush Grover
On Tuesday 26 September 2006 7:09 am, ankush grover wrote:
I know about cacti but for VPN Connectivity status one has to use telnet which I don't want to use and I don't know about monitoring DHCP server through it. Is there any other tool through which I can monitor Pix Firewaall ?
Perhaps have a look at rancid. It will allow you to script connecting to the pix and getting the output you want. its not intended to do what you want but i think it could be made to done it fairly easily
Perhaps have a look at rancid. It will allow you to script connecting to the pix and getting the output you want. its not intended to do what you want but i think it could be made to done it fairly easily
hey Dennis,
Thanks mate for the information. I will definitely look into this tool with the initial information on the rancid website there is no mention of Rancid supporting Pix Firewall.
Lets see and hopeful that it will support it.
Thanks & Regards
Ankush Grover
On Tuesday 26 September 2006 07:45, ankush grover wrote:
Perhaps have a look at rancid. It will allow you to script connecting to the pix and getting the output you want. its not intended to do what you want but i think it could be made to done it fairly easily
hey Dennis,
Thanks mate for the information. I will definitely look into this tool with the initial information on the rancid website there is no mention of Rancid supporting Pix Firewall.
Lets see and hopeful that it will support it.
rancid supports pix's i use it to maintain my cisco switches, routers and pix's
Dennis
Why not just use SNMP to monitor all that information? Cisco will provide you the MIBs.
Nick
ankush grover ankushcentos@gmail.com wrote: hey friends,
I am looking for a free open source software (web based or application) through which I can monitor the Pix Firewall. What it should show Interface status or traffic , VPN Connectivity status, CPU Status, Memory Status etc. I am also running DHCP server on Pix Firewall (due to some reasons) If it can monitor that also means showing how many IPAddresses has been assigned, to whom, what is the lease time etc. then it will be very good.
I know about cacti but for VPN Connectivity status one has to use telnet which I don't want to use and I don't know about monitoring DHCP server through it. Is there any other tool through which I can monitor Pix Firewaall ?
I am using Centos4.0
Thanks & Regards
Ankush Grover _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Like clay in the hands of a potter, to be molded according to his pleasure, So are men in the hands of their Creator, to be assigned by him their function. -- nickers_16@yahoo.com --------------------------------- Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail.
On 9/26/06, That One Guy Nick nickers_16@yahoo.com wrote:
Why not just use SNMP to monitor all that information? Cisco will provide you the MIBs.
Not a bad option. But haven't work much with the snmp .
Thanks & Regards
Ankush Grover
ankush grover wrote:
On 9/26/06, That One Guy Nick nickers_16@yahoo.com wrote:
Why not just use SNMP to monitor all that information? Cisco will provide you the MIBs.
Not a bad option. But haven't work much with the snmp .
I'd agree here. At least a good portion of the info you're looking for is available through SNMP. You can then use a nice webapp like cacti to display your SNMP gathered data and graph it.
-Shawn
On 9/26/06, ankush grover ankushcentos@gmail.com wrote:
Not a bad option. But haven't work much with the snmp .
Well, it's never too late to start. You can't pretend to admin network devices and servers without a basic knowledge of SNMP :-)
Like others, I recommend cacti. It's the easiest way to graph SNMP variables.
Other things you should do is direct your Pix's syslog to a syslogd on your CentOS server. Same thing for snmp traps, send them to snmptrapd and install the MIBs so you get a little bit of decoding.
-
ankush grover -
Dennis Gilmore -
Francois Caen -
Shawn K. O'Shea -
That One Guy Nick