Health monitoring in Cloud-Delivered Firewall Management Center

Configure health monitoring

These categories explain various elements of the Cloud-Delivered Firewall Management Center health monitoring model and how they work together.

• Health policy—Defines what Cloud-Delivered Firewall Management Center monitors for an assigned appliance. A health policy contains enabled health modules and the settings that control how each module operates, such as module-specific criteria, thresholds, and run or collection intervals where applicable. Select modules according to the system conditions and operational outcomes that you need to monitor, and review module applicability before applying the policy. For more information, refer to Health policies.

• Health module—Tests a specific system function or collects information about it. Alert modules report health status. Metrics modules collect time-series data, and some metrics modules also generate alerts when values cross configured thresholds. For more information, refer to Health modules.

• Health metrics—Time series data collected over time for a monitored system function. Cloud-Delivered Firewall Management Center displays metrics in health monitor dashboards so that you can analyze changes, trends, and relationships between system conditions.

• Health status—Indicates the result of a health module test or the compiled condition of a monitored appliance. Health monitor status categories include Error, Critical, Warning, Normal, Recovered, and Disabled as applicable.

• Health event—A record that Cloud-Delivered Firewall Management Center logs when a health module result meets the configured event conditions. The event contains information about the health module, monitored appliance, reported status, and condition. For more information, refer to Health event views.

• Health monitor dashboards—Displays the compiled health status for Cloud-Delivered Firewall Management Center and its managed appliances. It also provides an option to create custom dashboards to view specific health information. For more information, refer to About the health monitor.

• Alert response—Defines how Cloud-Delivered Firewall Management Center sends information to an external destination. For health-event alerting, use email or webhook alert responses. SNMP and syslog are not supported as the primary methods for sending health alerts to external systems.

• Health monitor alert—Associates a severity level, one or more health modules, and an alert response. When the selected severity occurs for a selected module, the health monitor alert triggers its associated alert response. For more information, refer to Health monitor alerts.

Health monitoring scope and behavior

• Cloud-Delivered Firewall Management Center automatically reports its own status using the modules configured in the default health policy. All appliances automatically report hardware status through the Hardware Alarms health module.

  Some health modules, such as the Appliance Heartbeat module, run on Cloud-Delivered Firewall Management Center and report the status of managed devices. To provide managed-device status, health policies must be deployed to the devices.

• If a health policy enables a module that does not apply to the selected appliance, the health monitor reports that module as Disabled. Review module applicability before applying a policy.