nv-l

RE: [nv-l] Cisco PIX Monitoring

2005-04-05 15:47:31
Subject: RE: [nv-l] Cisco PIX Monitoring
From: James Shanks <jshanks AT us.ibm DOT com>
To: nv-l AT lists.us.ibm DOT com
Date: Tue, 5 Apr 2005 15:47:00 -0400



>From the 7.1.4 FP02 Release Notes:

PIX Firewall Failover support


IBM Tivoli NetView provides support for monitoring the Cisco PIX Firewall
Failover conditions. NetView can monitor the failover state of the PIX
devices during normal status polling. When a failover occurs, a new event
is generated announcing whether the active addresses are on the primary or
secondary device. In addition, the operator can see on the map when the
active addresses are on the secondary device, which indicates that a
failover has occurred and action should be taken to prevent a further
failure that disables the firewalls. The management interface shows USER2
status, which is usually purple (by default). This propagates to change the
PIX device symbol to marginal. When the active addresses are returned to
the primary device, an event announces this fact and the status on the map
returns to Normal.


Use the netmon.seed file to configure both the PIX Firewall Failover
machines and to set and lock the SNMP address.


For more information on the PIX Firewall Failover support see the
/usr/OV/doc/PixFailoverReadme.pdf file.


Set and lock SNMP address


A NetView administrator can now set and lock the SNMP address for any
device.


For more information, see the A modified netmon.seed file section.



James Shanks
Level 3 Support  for Tivoli NetView for UNIX and Windows
Tivoli Software / IBM Software Group