Cisco PIX Firewall: Available memory buffer 1550-byte blocks Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoPix.Available1550blocks.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Available memory buffer 1550-byte blocks has changed its state.

Knowledge Base article:

Summary

Number of available memory buffer 1550-byte blocks is over/under threshold.

Over threshold: The number of available memory buffer 1550-byte blocks is above the maximum threshold configured in Xian Network Manager 2012.

Under threshold: The number of available memory buffer 1550-byte blocks is below the minimum threshold configured in Xian Network Manager 2012.

Causes

Over threshold: There are less than expected Ethernet packets for processing through the PIX using the available 1550-byte blocks.

Under threshold: There are excessive Ethernet packets for processing through the PIX using the available 1550-byte blocks.

Resolutions

Over thresholdThe PIX determines whether the packet is permitted or denied, according to the Adaptive Security Algorithm (ASA) and processes the packet through to the output queue on the outbound interface. If the PIX cannot support the traffic load, the number of available 1550-byte blocks hovers close to 0. When the CNT column hits zero, the PIX attempts to allocate more blocks, up to a maximum of 8192. If no more blocks are available, the PIX drops the packet.

Under threshold: Once the 1550 byte block memory has been fully exhausted, the appliance will start dropping packets and result in no packets being forwarded.

Additional

Monitors the current number of available 1550-byte blocks in memory buffer.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoPixFirewallSnmpDeviceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
Available memory buffer 1550-byte blocks Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoPix.Available1550blocks.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoPixFirewallSnmpDeviceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="Available1550blocks_AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Low</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<Algorithm>WorstOf</Algorithm>
</AggregateMonitor>