Cisco ASA: Open active TCP connections Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoASA.OpenActiveTCPConnections.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Open active TCP connections has changed its state.

Knowledge Base article:

Summary

Number of open active TCP connections is over threshold.

The number of open active TCP connections is above the maximum threshold configured in Xian Network Manager 2012.

Causes

Connections through the device might be exceeding threshold on a regular basis, due to network demand. TCP is retransmitting due to packet loss, duplication and modification, during its transfer across an IP network, or TCP connections remain as active when they should have been dropped out.

Resolutions

Evaluating the device capability is recommended. Also, checking for connectivity to improve transmission before timeout and testing if active connections are really in this status.

Additional

Monitors the number of open active TCP connections for the device.

Element properties:

Target

Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASASnmpDeviceElement

Parent Monitor

System.Health.PerformanceState

Algorithm

WorstOf

Category

StateCollection

Enabled

True

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

Low

Alert Auto Resolve

True

Remotable

True

Accessibility

Public

Alert Message

Open active TCP connections Alert

{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoASA.OpenActiveTCPConnections.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASASnmpDeviceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="OpenActiveTCPConnections_AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Low</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <Algorithm>WorstOf</Algorithm>

</AggregateMonitor>