How to enable SNMP on a Cisco ASA with Firepower Threat Defense

If you have a Cisco ASA with Firepower Threat Defense, you’ll need to enable SNMP using the Firepower device manager web interface. If you’re managing the Cisco device through the Managed Threat Defense web interface, the steps will vary.

The steps below use SNMP version 2c.

1. From the top navigation, click Device.
2. Scroll down to locate Advanced Configuration.
3. Click View Configuration.
4. From the side navigation, click FlexConfig Objects.
5. Click the add icon () to add an object.
6. Enter the name of SNMP-Server.
7. Enter the following detail in the Template field. Replace Collector-IP with the IP address of the collector, replace Sample with the contact name, and replace HQ with the firewall’s location. For the community, enter the string you’d like. The example below shows private.

snmp-server enable
  snmp-server host inside1_8 Collector-IP poll community private version 2c
  snmp-server community private
  snmp-server contact Sample
  snmp-server location HQ

8. Enter the following detail in the Negate Template field. Note that this text is a copy of the detail from the Template field, but with “no” added at the beginning of each line. Replace Collector-IP with the IP address of the collector, replace Sample with the contact name, and replace HQ with the firewall’s location. For the community, enter the string you’d like. The example below shows private.

no snmp-server enable
  no snmp-server host inside1_8 Collector-IP poll community private version 2c
  no snmp-server community private
  no snmp-server contact Sample
  no snmp-server location HQ

9. Click OK.
10. From the side navigation, click FlexConfig Policy.
11. Click the add icon () to add a new policy.
12. Select the SNMP-Server object just created.
13. Click OK.
14. From the top navigation, click the Deployment Summary icon ().
15. Click Deploy Now. The deployment can take several minutes to complete.
16. If you used a community string other than public or private, add it to Auvik by following these steps.

All done! Your Cisco ASA with Firepower Threat Defense can now be monitored using Auvik.