Checking the Health Checks of the EDGE SWG/ProxySG by CLI

Products

• ISG Proxy

Issue/Introduction

 - Is it possible to see the Health Checks of the Edge/SWG/ProxySG proxy by CLI?

- Is it possible to send SNMP events to monitor Health Checks? 
   

- Is there any OID to monitor it? 

Resolution

Yes, you can view health check status for literally every configured/critical component on the appliance, using the #(config health-check) view command. For reference, please see the Tech. Article with the URL below.

Monitor ProxySG health check status from an external service

Also, see the snippet below, for a sample execution of the command, from the lab environment.

Concerning SNMP, yes also. The health of the external servers can be polled using HEALTHCHECK MIB. The HEALTHCHECK-MIB sends notifications when selected health checks of upstream systems transition from healthy to unhealthy or vice versa. The message sent in the notification describes the health check transition.

The health check data includes:

1. Name of the health check
2. Current state of the health check.

• unknown(1)
• ok(2)
• okWithErrors(3)
• okForSomeIPs(4)
• okButFailing(5)
• checkFailed(6)
• dnsFailed(7)
• okOnAltServer(8)

3. Time taken by the last health check (in milliseconds).

Enable or disable health checks by editing values in the SGAC (Administration > Health Checks), or by using the health-checks CLI configuration command. For more information, refer to the chapter Verifying the Health of Services Configured on the ProxySG in the SGOS Administration Guide.

The HEALTHMONITOR-MIB monitors changes to the health of the ProxySG appliance appliance. When the health monitor status changes, notification is sent describing the health monitor transition. The notifications to be sent are configured in the Administration > Health Monitoring). The Health monitor will send three types of trap notification, depending on the
state system transitioned to, as follows:

• Ok
• Warning
• Critical

The Health monitor state may also be polled. It will provide the current system state as one of the these states:

• ok(1)
• warning(2)
• critical(3)
• unknown(4)

Modify health monitoring threshold and notification properties by editing the values in the SGAC (Administration > Health Monitoring), or by using the alert notification and alert threshold CLI configuration commands. For more information, refer to the chapter Monitoring the ProxySG in the SGOS Administration Guide.

For available OID, please see the tech doc with the URL below.

Using Key Resources to Identify Trends

For more on the OIDs, please refer to the resource doc, Critical Resource Monitoring, Using SNMP