Monitor a ISA 2006 Server with Cacti / SNMP

joez · Joined: 11 Feb 2008 Posts: 34

I would like to monitor the same performance date (e.g. active connections, etc.) as in the isa performance monitor tool on a 2006 isa server.

I googled around and searched the forum, but I cant find any info on:

- how to enable SNMP to work with ISA Server 2006
- cacti templates for the counters
- mib for the performance counters

I am sure someone is running the setup I desire and I would appreciate any help!

thanks

BSOD2600 · Posted: Wed Apr 09, 2008 12:20 pm Post subject:

1) do you know if ISA natively supports snmp?
2) snmp-informant can expose ISA information via SNMP.
3) search the script forum for others who have created ISA templates -- they'll likely be WMI, but you can modify them to work for you.
4) if you can't find any templates, then you can easily make them. read in the cacti documentation site for guides.
5) Cacti doesn't use mib files.

joez · Joined: 11 Feb 2008 Posts: 34

1) No I dont. I read somewhere however that it might if SNMP is installed prior to installing the ISA software. I would appreciate experiences on this...

2) Yes, thats true. But only with commercial extension pack and I dont want to spend any additional money on software...

3) I did but didnt find any.

4) Thats true. But first I need to get the ISA server to expose the performance monitor data via SNMP.

5) I know it doesnt. But when walking the ISA server with (hopefully) functioning SNMP support I would need according MIBs so I know what the OIDs contain, you know?

BSOD2600 · Posted: Tue Apr 15, 2008 5:35 pm Post subject:

1) I haven't used ISA server, so you're going to have to resort to the MS forums / google for finding your answer.

4) this tool might help accomplish what you're after.

5) This is true.

mcutting · Cacti Pro User Joined: 16 Oct 2006 Posts: 974

We have recently setup ISA 2007 in a cluster. We have snmp access to this box ina dmz via policy.

ISA info is not exposed via SNMP as far as I am aware, even if the service was running on the box before ISA was installed.

You may be able to expose the perfmon counters via 3rd party software (there is a SNMP agent that has been custom written that does this on these forums). Apart from that, it'll have to be WMI, which could make your firewall turn to swiss cheese.

that_kid · Joined: 18 Mar 2005 Posts: 29

You need to enable snmp in the system policy, then add a rule to enable localhost to talk to the snmp collector then create an access rule for your collection server to connect to the isa server. I have it working on ISA2006 here so I know it's possible.