Showing Module Statistics; Monitoring Module Connections - Cisco ASA Series Configuration Manual

Monitoring the ASA FirePOWER Module
App. name:
App. Status:
App. Status Desc:
App. version:
Data Plane Status:
Status:
DC addr:
Mgmt IP addr:
Mgmt Network mask:
Mgmt Gateway:
Mgmt web ports:
Mgmt TLS enabled:
The following example shows the location of the ASA FirePOWER boot image that was used with the
sw-module module sfr recover command when installing the module.
hostname# show module sfr recover
Module sfr recover parameters...
Boot Recovery Image: No
Image File Path:

Showing Module Statistics

Use the show service-policy sfr command to display statistics and status for each service policy that
includes the sfr command. Use clear service-policy to clear the counters.
The following example shows the ASA FirePOWER service policy and the current statistics as well as
the module status. In monitor-only mode, the input counters remain at zero.
ciscoasa# show service-policy sfr
Global policy:
Service-policy: global_policy

Monitoring Module Connections

To show connections through the ASA FirePOWER module, enter one of the following commands:
•
•
•
Cisco ASA Series Firewall CLI Configuration Guide
7-22
ASA FirePOWER
Up
Normal Operation
5.3.1-100
Up
Up
10.89.133.202
10.86.118.7
255.255.252.0
10.86.116.1
443
true
disk0:/asasfr-5500x-boot-5.3.1-44.img
Class-map: my-sfr-class
SFR: card status Up, mode fail-close
packet input 2626422041, packet output 2626877967, drop 0, reset-drop 0, proxied 0
show asp table classify domain sfr
Shows the NP rules created to send traffic to the ASA FirePOWER module.
show asp drop
Shows dropped packets. The drop types are explained below.
show conn
Shows if a connection is being forwarded to a module by displaying the 'X - inspected by service
module' flag.
Chapter 7 ASA FirePOWER Module