Monitor SRX Series Firewalls in CSDS Groups

Dashboard

Dashboard tab offers a comprehensive overview of the performance metrics for the devices within the group. The tab shows widgets for Routing Engine (RE), Service Processing Unit (SPU), current flow sessions, connections, packets, bits, and other device statistics.

Table 1 describes widgets under the Dashboard tab.

Figure 1: Dashboard

If more than ten devices are added to the CSDS group, the widgets will display statistics for only the top ten devices based on the RE CPU utilization. To view statistics for all the devices, click View all at the bottom of the widgets.

Resources

Resources tab displays indicators relevant to the devices within the group. You can track the performance of SRX Series Firewalls against the predefined values of parameters. The resources metrics measure and evaluate the network's performance, quality, and reliability. These metrics help identify potential issues, enabling proactive management and optimization of network performance.

Figure 2: Resources Tab

You can view widgets for different time periods by selecting one of the following options:

• Last 15 minutes

• Last 1 hour

• Last 4 hours

• Last 12 hours

• Last 1 day

• Last 1 week

• Last 2 weeks

• Custom—Select a specific time range that suits your needs Click Ok.

Table 2 describes widgets under the Resources tab.

Device Interfaces

The Device Interfaces tab provides comprehensive details about the interfaces of each device within the group. You can monitor the status, performance, and other relevant metrics of the device interfaces. The device interface widgets helps you to visualize and analyze the status and utilization of your network devices.

Table 3 describes widgets under the Device Interfaces tab.

In the Device Interfaces tab, you can view widgets for different time periods by selecting one of the following options:

• Last 15 minutes

• Last 1 hour

• Last 4 hours

• Last 12 hours

• Last 1 day

• Last 1 week

• Last 2 weeks

• Custom—Select a specific time range that suits your needs Click Ok.

IPsec Tunnels

An IPsec tunnel is a secure communication channel established between two endpoints using the Internet Key Exchange (IKE) protocol along with either the Encapsulating Security Payload (ESP) or Authentication Header (AH) protocol. IPsec tunnels are configured to encrypt and decrypt traffic between the devices. IPsec Tunnels tab provides statistics about the status and performance of IPsec tunnels, which are crucial for secure communication between different network segments.

We recommend you install the Junos-IKE package on the SRX Series Firewall. Use CLI command request system software add optional://junos-ike.tgz to install the package.

Table 4 describes widgets under the IPsec Tunnels tab.

In the IPsec Tunnels tab, you can view widgets for different time periods by selecting one of the following options:

• Last 1 hour

• Last 4 hours

• Last 12 hours

• Last 1 day

• Last 1 week

• Last 2 weeks

• Custom—Select a specific time range that suits your needs Click Ok.

NAT Rules

Network Address Translation (NAT) is a technique used to modify or translate network address information in packet headers. It can involve changing the source address, destination address, or both in a packet. NAT also allows for the translation of port numbers alongside IP addresses. NAT rules help manage and optimize network traffic by mapping one IP address to another, allowing multiple devices to share a single public IP address.

Table 5 describes widgets under the NAT Rules tab.

In the NAT Rules tab, you can view widgets for different time periods by selecting one of the following options:

• Last 1 hour

• Last 4 hours

• Last 12 hours

• Last 1 day

• Last 1 week

• Last 2 weeks

• Custom—Select a specific time range that suits your needs Click Ok.

NAT Pools

NAT pools are used to manage and allocate IP addresses for NAT operations. These pools are essential for configuring source and destination NAT, allowing multiple internal IP addresses to be mapped to a smaller set of external IP addresses

Table 6 describes widgets under the NAT Pools tab.

In the NAT Pools tab, you can view the widgets for different time periods by selecting one of the following options:

• Last 1 hour

• Last 4 hours

• Last 12 hours

• Last 1 day

• Last 1 week

• Last 2 weeks

• Custom—Select a specific time range that suits your needs Click Ok.

Security Policies

Security policies are sets of statements that control network traffic between specified source and destination zones using specified services or applications. These policies determine whether traffic is permitted, denied, rejected, or otherwise handled as it passes through the SRX Series Firewall.

The Security Policies tab displays the total, average, and per-device count of security rule hits across all SRX Series Firewalls.

Table 7 describes widgets under the Security Policies tab.

In the Security Policies tab, you can view widgets for different time periods by selecting one of the following options:

• Last 1 day

• Last 1 week

• Last 2 weeks

• Custom—Select a specific time range that suits your needs Click Ok.

Manage Tabs and Widgets

To add a new tab:

1. Click CSDS Groups > Monitor. The Monitor page is displayed.

2. Click + Add tab.

3. Enter a name for the new tab.

   The name should be a string of maximum 20 characters. The string can contain alphanumeric characters, spaces, and special characters such as colons, hyphens, periods, and underscores.

4. Press Enter

   A new tab is created.

To add widgets to a tab:

1. Click Add Widgets.

   The list of widgets is displayed.

2. Select widgets for the tab. You can also search for the widgets you need from the widgets list.

   You can select widgets from the following combination of sections:

   • Resources and Device Interfaces

   • IPsec Tunnels and NAT

   • Security Policies

3. Click OK.

   The selected widgets are added to the tab to monitor the SRX Series Firewalls.

To delete a tab:

1. Click X next to the tab name.

   A pop-up window is displayed to confirm the deletion.

2. Click Yes.

   The tab is deleted.

To remove a widget from a custom tab:

1. Click Widgets at the top-right corner of the page.

   The list of widgets is displayed.

2. Clear the widgets for the tab from the widgets list.

3. Click OK.

   The widgets are removed from the tab.

You can switch between the Monitor and Topology pages. Click Topology at the top-right corner of the page to view the topology of the CSDS group. For more information about topology, see View CSDS Groups Topology.