Zabbix on cloud, with ASA on-premise
Connecting ASA, that is on-premise, but there is a VPN tunnel between the premise and the Claudion cloud server with Zabbix installed.
Make sure that the SNMP traffic is allowed between ASA and Zabbix server, UDP port 161 . this is standard port, you can change it to any random port, but protocol should be UDP.
On ASA, please do the following configuration on CLI. For GUI ( ASDM ) , please refer to our previously published document
snmp-server host dmz2 xx.xx.xx.xx community ***** version 2c
no snmp-server location
no snmp-server contact
snmp-server enable traps syslog
snmp-server enable traps ipsec start stop
snmp-server enable traps memory-threshold
snmp-server enable traps interface-threshold
snmp-server enable traps remote-access session-threshold-exceeded
snmp-server enable traps connection-limit-reached
snmp-server enable traps cpu threshold rising
snmp-server enable traps ikev2 start stop
snmp-server enable traps nat packet-discard
If the traffic through a NAT firewall, please make sure the traffic received on ASA is configured for NO-NAT, or do the configuration on ASA accordingly. Please contact us on support@claudion.com for any clarification.
Originally published at https://app.claudion.com on May 4, 2022.