Cisco ASA: IPSec sessions outgoing traffic Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoASA.IPSecSessionsOutgoingTraffic.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the IPSec sessions outgoing traffic if has changed its state.

Knowledge Base article:

Summary

IPSec session global outgoing traffic is over threshold.

The number of all active IPSec sessions outgoing Kbits per second is above the maximum threshold configured in Xian Network Manager 2012.

Causes

There is a high amount of octets being sent by all active IPSec sessions.

Resolutions

Review the sessions that are running in order to close the less priority sessions.

Additional

Monitors the traffic sent on all active IPSec sessions, detecting when the average traffic is above normal values.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASAIPSecSessionsElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
IPSec sessions outgoing traffic Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoASA.IPSecSessionsOutgoingTraffic.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASAIPSecSessionsElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="IPSecSessionsOutgoingTraffic_AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Low</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<Algorithm>WorstOf</Algorithm>
</AggregateMonitor>