Monitor Device Health Metrics

This chapter explains how to use the Device Health Metrics dashboard to gain detailed insights of your device.

About Device Health Metrics

Use the Device Health Metrics dashboard to gain detailed insights into the performance of your ASA devices. By enabling this feature, you can monitor key performance metrics to ensure optimal device operation and identify potential issues.

For Firewall Threat Defense devices managed by Cloud-Delivered Firewall Management Center, Health Monitoring is enabled by default. For more information, see Health Monitoring.

Benefits of Device Health Metrics

  • Enhanced monitoring: Gain insights into device performance with real-time data snapshots.

  • Enhanced decision-making: Use detailed metrics to make data-driven decisions about device management and troubleshooting.

  • Efficient resource management: Track CPU, memory, and interface usage to allocate resources effectively.

Enable Device Health Metrics

Before you can monitor your ASA devices using Device Health Metrics, the feature must be enabled at the tenant level and, for Secure Device Connector-managed ASA devices, at the individual device level. This ensures that health data is collected and available for analysis within the dashboard.

To enable this feature, you must have the Super Admin user role.

Procedure

Step 1

In the left pane, click Administration > General Settings.

Step 2

In the Tenant Settings section, enable the Enable ASA Health Monitoring toggle to enable the Device Health Metrics feature for your tenant.

Device Type Considerations

  • For ASA devices managed by Cloud Device Gateway (CDG), health metrics are enabled when the Enable Device Health Metrics toggle in General Settings is enabled.

  • For ASA devices managed by Secure Device Connector (SDC), manually enable health metrics for each device:

    1. In the left pane, chooseSecurity Devices.

    2. Select the SDC-managed ASA device.

    3. In the Device Actions pane on the right, choose Opt-in to Health Metrics.

      If the device is already opted in, you will see the option to Opt-out of Health Metrics instead.

Note

 

Each SDC can support health metrics collection for up to 50 ASA devices.

Bulk Opt in or Opt out of Device Health Metrics

On the Security Devices page, you can bulk opt in or opt out of Device Health Metrics for ASA devices managed by Secure Device Connector (SDC).

Procedure

Step 1

In the left pane, click Security Devices.

Step 2

You can select multiple ASA devices to modify the health metrics settings.

Step 3

In the right pane, under Device Actions, click Opt in/Opt out Health Metrics.

The Opt in/Opt out Health Metrics pop-up appears displaying the following information:

  • The total number of devices selected.

  • Devices that are not managed by SDCs.

  • Lists of devices categorized by their current health metrics.

Step 4

Click Opt out or Opt in as required.

View the Device Health Metrics Dashboard

The Device Health Metrics dashboard provides a centralized view of critical performance data for your ASA devices. Use this dashboard to monitor device health, resource usage, and interface statistics to ensure optimal network operations.

Procedure

Step 1

In the left pane, click Insights & Reports > Reports & Analytics > Device Health Metrics.

Step 2

In the Interfaces section, select a device from the drop-down menu. All interfaces for the selected device are listed. The data auto-refreshes every 5 minutes.

Step 3

Choose a Duration from the drop-down menu, or a select a custom date and time range to view data for interfaces during the specified period.

Step 4

You can select up to four interfaces to compare the data.

Step 5

Click View Security Devices to view more details about the selected device. The device you selected in the Device Health Metrics dashboard will be selected on the Security Devices page, and its details are displayed in the right pane.

  • Additionally, from the Security Devices page, select an ASA device.

  • Under Device Actions, click Health Metrics to view the Device Health Metrics dashboard.

Troubleshooting Device Health Metrics

Consider the following reasons for data not being displayed in the Device Health Metrics dashboard:

  • Health metrics not enabled for tenant

    Workaround: Navigate to Administration > General Settings and ensure that the Enable ASA Health Monitoring toggle is enabled. This will enable health metrics for all devices within the tenant.

  • No ASA devices have been onboarded

    Workaround: Navigate to the Security Devices page to onboard your ASA devices. Ensure that devices are properly onboarded to start monitoring them.

  • Health metrics are not enabled for the individual ASA devices using on-prem SDC

    Workaround: Verify that health metrics are enabled for each device using an on-prem Secure Device Connector. Note that each SDC supports monitoring up to 50 devices.

  • The device is unreachable

    Workaround: Check the connectivity of the device. Ensure that the device online. Navigate to the Security Devices page to verify and troubleshoot connectivity issues.