Cisco PIX Firewall: Available memory buffer 65536-byte blocks Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoPix.Available65536blocks.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Available memory buffer 65536-byte blocks has changed its state.

Knowledge Base article:

Summary

Number of available memory buffer 65536-byte blocks is over/under threshold.

Over threshold: The number of available memory buffer 65536-byte blocks is above the maximum threshold configured in Xian Network Manager 2012.

Under thresholds: The number of available memory buffer 65536-byte blocks is below the minimum threshold configured in Xian Network Manager 2012.

Causes

Over threshold: There is use of 65536-byte blocks less than expected, probably due to operation in compression mode.

Under threshold: There is excessive use of 65536-byte blocks, probably due to operation in compression mode.

Resolutions

Over threshold: If the PIX cannot support traffic load, the number of available 1550-byte blocks hovers close to 0. When the CNT column hits zero, the PIX attempts to allocate more blocks, up to a maximum of 8192. If no more blocks are available, the PIX drops the packet.

Under threshold: Once the 65536 byte block memory has been fully exhausted, the appliance will start dropping packets and result in no packets being forwarded.

Additional

Monitors the current number of available 65536-byte blocks in memory buffer.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoPixFirewallSnmpDeviceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
Available memory buffer 65536-byte blocks Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoPix.Available65536blocks.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoPixFirewallSnmpDeviceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="Available65536blocks_AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Low</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<Algorithm>WorstOf</Algorithm>
</AggregateMonitor>