12-03-2013 08:48 PM
I'm trying to evaluate HP iMC and am having trouble getting Netflow traffic analysis to work with with our Cisco ASA.
When I discover the device in iMC it registers it as a Cisco AS5510 (correct) but categories it as a Voice device when it is a Security device. Further inspection using the MIB browser shows me that the OID being reported for the device is 22.214.171.124.126.96.36.199.0 when it actually should be 188.8.131.52.184.108.40.206.669
The Cisco MIB support list for this device is here: ftp://ftp.cisco.com/pub/mibs/supportlists/asa/asa-
Is someone able to help me with what I need to do to get this corrected in iMC? I've followed all the guides and videos to get NTA setup and I have tested it working fine with another Cisco router, however iMC will just not receive data from the ASA no matter what I do and I think it is because the device is not being registered correctly as shown above.
I assume I need to import the MIB or Traps for the Cisco ASA into iMC, but I can't seem to work it out.
I'm new to both iMC and Cisco ASA's so detailed help would be greatly appreciated. This is the last thing I need to get working correctly before I can recommend we purchase the product.
12-04-2013 03:15 PM
ASAs do some non-standard things with NetFlow, and I haven't been able to get IMC to process that format.
220.127.116.11.18.104.22.168.0 is the sysUpTime OID. That will not be used to detect the device type. IMC will be polling 22.214.171.124.126.96.36.199 (sysObjectID), which should return 188.8.131.52.184.108.40.206.669
On the Device Details page for the ASA, it should report the sysOID. What does it say on that page? Can you post a screenshot of that?
You are unlikely to need to import any MIBs or Trap Definitions.
12-04-2013 04:09 PM - edited 12-04-2013 04:14 PM
Hi Lindsay, thanks for the reply. Please see attached a grab of the ASA device details in iMC.
I can get our ASA to send Netflow data just fine to PRTG Network Monitor as well as Whatsup Gold. I really like the features I can get out of HP iMC but it's making it hard for me to justify the purchase if I can't get the same functionality to work with our devices.
Hopefully you or someone might be able to give me some more info to get it working.... cheers
12-04-2013 05:02 PM
That will make no difference to NetFlow though. I wasn't able to get it working last time I tried with IMC 5.1 SP1, and I haven't seen anything in the more recent release notes to indicate that has changed.
See here for some more on this: http://www.netopscommunity.net/forums/-/message_bo