Cisco ASA: Active IPSec sessions Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoASA.ActiveIPSecSessions.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Active IPSec sessions has changed its state.

Knowledge Base article:

Summary

Active IPSec sessions is over threshold.

The total number of active IPSec sessions is above the maximum threshold configured in Xian Network Manager 2012.

Causes

There is a high amount of IPSec sessions actives.

Resolutions

Review the sessions that are running in order to close the less priority sessions.

Additional

Monitors the number of currently active IPSec sessions.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASAIPSecSessionsElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
Active IPSec sessions Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoASA.ActiveIPSecSessions.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASAIPSecSessionsElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="ActiveIPSecSessions_AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Low</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<Algorithm>WorstOf</Algorithm>
</AggregateMonitor>