Blades > IDA

For more information, see the Identity Awareness Administration Guide for your version.

CPView Gauges

  1. Run: cpview

  2. From the top, click Software-blades > IDA.

CLI

Run these commands in the Expert mode (see the CLI Reference Guide for your version):

adlog

pdp

pep show

Metric Information

Metric ID

Metric Description

Metric Type

Metric Units

Metric Labels

Metric Label Description

VSX Behavior

ida.ad_query.events

AD Query data.

AsyncCounter

{events}

{'ip', 'name'}

  • ip

    The destination IP address of the AD query.

  • name

    The name of the AD query.

Different data for each Virtual System.

ida.ad_query.state

AD Query state.

Gauge

{state}

{'ip', 'name'}

  • ip

    The destination IP address of the AD query.

  • name

    The name of the AD query.

Different data for each Virtual System.

ida.authenticated

Total number of authenticated objects that Identity Awareness acquired.

AsyncCounter

{objects}

{'entity', 'method'}

  • entity

    The owner (user or machine).

  • method

    The authentication method:

    • Kerberos

    • User and password

    • AD Query

    • SAML

Different data for each Virtual System.

ida.authenticated.count

Total number of authenticated objects that Identity Awareness acquired.

AsyncCounter

{objects}

{'entity'}

  • entity

    The owner (user or machine).

Different data for each Virtual System.

ida.broker.subscribers

Displays Broker Subscriber statistics: Status, Errors, Filtered, Message Transport, and Sync Transport values.

  • Disconnected: 0

  • Disconnected [Not Established]: 0

  • Connected: 1

  • Default: 2

This metric is available only in:

Gauge

{state}

{ip, version, type}

  • ip

    Subscriber’s IP address

  • version

    Broker Version

  • type

    • Errors

    • Filtered

    • Message Transport

    • Sync Transport

    • Status

Different data for each Virtual System.

ida.components.disconnections

Number of times the component disconnected.

AsyncCounter

{disconnections}

{'name'}

  • name

    The name of the PDP or PEP server.

Different data for each Virtual System.

ida.components.state

The state of the Identity Awareness component (PDP, or PEP).

Gauge

{state}

{'local', 'name'}

  • local

    Is the component running on the Security Gateway you query?

  • name

    The name of the PDP or PEP server.

Different data for each Virtual System.

ida.logged.unsuccessful

Total number of unsuccessful logins related to Identity Awareness.

AsyncCounter

{logins}

{'entity', 'method'}

  • entity

    The owner (user or machine).

  • method

    The authentication method:

    • Kerberos

    • User and password

Different data for each Virtual System.

ida.logins.count

Total number of logins related to Identity Awareness.

AsyncCounter

{logins}

{'method'}

  • method

    The authentication method:

    • Captive Portal

    • Total Identity Agents

    • AD Query

    • Full Identity Agents for Windows OS

    • Lite Identity Agents for Windows OS

    • Mac Identity Agents for macOS

    • Identity Agents for Windows Terminal Server

    • RADIUS Accounting

    • Remote Access VPN

    • Identity Collectors (Active Directory)

    • Identity Collectors (Cisco ISE)

    • Identity Collectors (eDirectory)

    • Identity Awareness API

    • Identity Awareness acquired from the Packet Tagging protection

Different data for each Virtual System.

ida.logins.successful

Total number of successful logins related to Identity Awareness.

AsyncCounter

{logins}

{'entity', 'method'}

  • entity

    The login owner (user or machine).

  • method

    The authentication method:

    • Kerberos

    • User and password

Different data for each Virtual System.

ida.memory

Memory used by Identity Awareness.

AyncCounter

By

{'type', 'entity'}

  • type

    The type of the buffer.

  • entity

    The kind of session.

Different data for each Virtual System.

ida.overview.concurrent_process_resources_allocation

Identity Awareness statistics for concurrent process resource allocation.

This metric is available in:

Gauge

{state}

{name, type}

  • name

    The process name

  • type

    The resource type:

    • CPU

    • Memory_size

    • MemoryRss

    • Uptime

Different data for each Virtual System.

ida.overview.enabled_components

Identity Awareness enabled components status:

  • PDP: 1

  • PEP: 2

  • PEP & PDP: 3

  • default/unknown: 0

This metric is available in:

Gauge

{state}

{}

 

Different data for each Virtual System.

ida.overview.multi_instance_status

Identity Awareness multi-instance status:

  • Disabled (Single Instance): 1

  • Enabled (N Instances) = N (for N = 2-10)

  • default/unknown = -1

This metric is available in:

Gauge

{state}

{}

 

Different data for each Virtual System.

ida.overview.peak_process_resources_allocation

Identity Awareness statistics for peak process resource allocation.

This metric is available in:

Gauge

{state}

{name, type}

  • name

    The process name

  • type

    The resource type:

    • CPU

    • Memory_size

    • MemoryRss

Different data for each Virtual System.

ida.overview.scaled_sharing_status

Identity Awareness Scaled Sharing status:

  • Disabled: 0

  • Enabled (PEP): 1

  • Enabled (PDP): 2

  • Enabled (PEP & PDP): 3

  • default/unknown: 1

This metric is available in:

Gauge

{state}

{}

 

Different data for each Virtual System.

ida.pdp.authentication_roundtrip

Identity Awareness statistics for PDP message queues.

This metric is available in:

Gauge

{state}

{message_queues_name, type}

  • message_queues_name

    The name of the message queue.

  • type

    The queue metric:

    • concurrent_queue_size

    • peak_queue_size

    • fragmented_messages_count

Different data for each Virtual System.

ida.pdp.broker.subscribers

Displays Broker Subscriber statistics: Status, Errors, Filtered, Message Transport, and Sync Transport values.

  • Disconnected: 0

  • Disconnected [Not Established]: 0

  • Connected: 1

  • Default: 2

This metric is available in:

Gauge

{state}

{ip, version, type}

  • ip

    Subscriber’s IP address

  • version

    Subscriber Version

  • type

    • Errors

    • Filtered

    • Message Transport

    • Sync Transport

    • Status

Different data for each Virtual System.

ida.pdp.login_rates

Identity Awareness statistics for the PDP login rate during the last 60 seconds.

This metric is available in:

Gauge

{state}

{instance_name, type}

  • instance_name

    The PDP instance name.

  • type

  • The login rate metric:

    • concurrent_login_rate

    • peak_login_rate

Different data for each Virtual System.

ida.pdp.message_queues

Current size of the message queue.

This metric is available in:

Gauge

{state}

{type, message_queues_name}

  • type

    Queue counted type.

  • message_queues_name

    Name of the message queue.

N/A

ida.pdp.overview

PDP hardware overview statistics, displaying CPU, Memory Size, and Memory Rss values.

This metric is available only in:

AsyncCounte

{logins}

{method}

  • method

    • CPU

    • Memory Size

    • Memory Rss

Different data for each Virtual System.

ida.pdp.scaled_sharing.invalidation_peak_rates

Identity Awareness statistics for the PDP Scaled Sharing peak invalidation rate.

This metric is available in:

Gauge

{invalidations}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

  • The invalidation type:

    • add_session

    • add_network

    • delete_session

    • delete_network

Different data for each Virtual System.

ida.pdp.scaled_sharing.invalidation_rates

Identity Awareness statistics for the PDP Scaled Sharing invalidation rate.

This metric is available in:

Gauge

{invalidations}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

  • The invalidation type:

    • add_session

    • add_network

    • delete_session

    • delete_network

Different data for each Virtual System.

ida.pdp.scaled_sharing.peak_queries_rate

Identity Awareness statistics for the PDP Scaled Sharing peak query rate.

This metric is available in:

Gauge

{queries}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

  • The query metric:

    • Single_IP_Query

    • Range_IP_Query

    • network

    • empty_responses

Different data for each Virtual System.

ida.pdp.scaled_sharing.queries_rate

Identity Awareness statistics for the PDP Scaled Sharing query rate.

This metric is available in:

Gauge

{queries}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

  • The query metric:

    • Single_IP_Query

    • Range_IP_Query

    • network

    • empty_responses

Different data for each Virtual System.

ida.pdp.session_count

Identity Awareness statistics for the number of PDP sessions.

This metric is available in:

Gauge

{state}

{instance_name, type}

  • instance_name

    The PDP instance name.

  • type

  • The session metric:

    • basic_sessions_count

    • peak_basic_sessions_count

    • super_sessions_count

    • peak_super_sessions_count

Different data for each Virtual System.

ida.pdp.smartpull.peaktime

PDP maximal recorded SmartPull statistics, displaying Register Requests, Network Requests, Single Rtt, and Average Rtt peak values per PEP.

This metric is available in:

Gauge

{state}

{ip, type}

  • ip

    PEP’s IP address

  • type

    • Register Requests

    • Network Requests

    • Single Rtt

    • Average Rtt

Different data for each Virtual System.

ida.pdp.smartpull.realtime

 

PDP concurrent SmartPull statistics, displaying Register Requests, Networks Requests, Single Rtt, and Average Rtt values per PEP.

This metric is available in:

Gauge

{state}

{ip, type}

  • ip

    PEP’s IP address

  • type

    • Register Requests

    • Network Requests

    • Single Rtt

    • Average Rtt

Different data for each Virtual System.

ida.pep.connections

PEP connection statistics, displaying the number of connected users and the connection status per PDP.

  • Disconnected: 0

  • Connected: 1

  • Default: 2

This metric is available in:

Gauge

{state}

{ip, type}

  • ip

    PDP’s IP address

  • type

    Users / Status

Different data for each Virtual System.

ida.pep.Infinity_Identity

Identity and Trust statistics.

This metric is available in:

AsyncCounter

{logins}

{type}

type

The Identity and Trust metric:

  • Query rates:

    • single_ip_queries_rate
    • ip_range_queries_rate
    • network_queries_rate
  • Peak query rates:

    • ip_range_queries_peak
    • network_queries_peak
  • Overall query counters:

    • single_ip_queries_overall
    • ip_range_queries_overall
    • network_queries_overall
    • summary_of_all_queries
  • Empty responses:

    • empty_single_ip_response
    • empty_network_response
  • Invalidation counters:

    • inval_add_session_overall
    • inval_add_network_overall
    • inval_delete_session_overall
    • inval_delete_network_overall
  • Network counters:

    • networks_to_infinity_identity
  • Last event timestamps:

    • last_single_ip_query_time
    • last_ip_range_query_time
    • last_network_query_time
    • last_add_session_inval_time
    • last_add_network_inval_time
    • last_delete_session_inval_time
    • last_delete_network_inval_time

Different data for each Virtual System.

ida.pep.Infinity_Identity.concurrent_rate_of_invalidations

Identity and Trust statistics for concurrent invalidations.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The invalidation type:

    • add_session

    • add_network

    • delete_session

    • delete_network

Different data for each Virtual System.

ida.pep.Infinity_Identity.disconnections_count

Identity and Trust statistics for disconnections.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    • disconnections_count

Different data for each Virtual System.

ida.pep.Infinity_Identity.networks_count

Identity Awareness statistics for the number of Identity and Trust networks.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    • networks_count

Different data for each Virtual System.

ida.pep.Infinity_Identity.rate_peak_invalidations

Identity and Trust statistics for peak invalidations.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The invalidation type:

    • add_session

    • add_network

    • delete_session

    • delete_network

Different data for each Virtual System.

ida.pep.Infinity_Identity.round_trip_time_avg

Identity and Trust statistics for average round trip time.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type:

    The query type:

    • single_ip_query

    • ip_range_query

    • network_query

Different data for each Virtual System.

ida.pep.Infinity_Identity.round_trip_time_peak

Identity and Trust statistics for peak round trip time.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The query type:

    • single_ip_query

    • ip_range_query

    • network_query

Different data for each Virtual System.

ida.pep.message_queues

Identity Awareness statistics for PEP message queues.

This metric is available in:

Gauge

{messages}

{type}

type

The queue metric:

  • current_queue_size

  • peak_queue_size

  • fragmented_messages

Different data for each Virtual System.

ida.pep.overview

PEP hardware overview statistics, displaying CPU, Memory Size, and Memory Rss values.

This metric is available only in:

AsyncCounte

{logins}

{method}

  • method

    • CPU

    • Memory Size

    • Memory Rss

Different data for each Virtual System.

ida.pep.scaled_sharing

Identity Awareness statistics for PEP Scaled Sharing.

This metric is available in:

AsyncCounter

{logins}

{type}

type:

The Scaled Sharing metric:

  • Query rates:

    • single_ip_queries_rate

    • ip_range_queries_rate

    • network_queries_rate

  • Peak query rates:

    • single_ip_queries_peak

    • ip_range_queries_peak

    • network_queries_peak

  • Overall query counters:

    • single_ip_queries_overall

    • ip_range_queries_overall

    • network_queries_overall

    • summary_of_all_queries

  • Empty responses:

    • empty_single_ip_response

    • empty_network_response

  • Invalidation counters:

    • inval_add_session_overall

    • inval_add_network_overall

    • inval_delete_session_overall

    • inval_delete_network_overall

  • Network counters:

    • scaled_sharing_networks_overall

  • Last event timestamps:

    • last_single_ip_query_time

    • last_ip_range_query_time

    • last_network_query_time

    • last_add_session_inval_time

    • last_add_network_inval_time

    • last_delete_session_inval_time

    • last_delete_network_inval_time

Different data for each Virtual System.

ida.pep.scaled_sharing.concurrent_rate_of_invalidations

Identity Awareness Scaled Sharing statistics for the rate of concurrent invalidations.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The invalidation type:

    • add_session

    • add_network

    • delete_session

    • delete_network

Different data for each Virtual System.

ida.pep.scaled_sharing.disconnections_count

Identity Awareness Scaled Sharing statistics for disconnections.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    disconnections_count

Different data for each Virtual System.

ida.pep.scaled_sharing.networks_count

Identity Awareness statistics for the number of Scaled Sharing networks.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    networks_count

Different data for each Virtual System.

ida.pep.scaled_sharing.rate_peak_invalidations

Identity Awareness statistics for peak Scaled Sharing invalidation rates.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The invalidation type:

    • add_session

    • add_network

    • delete_session

    • delete_network

Different data for each Virtual System.

ida.pep.scaled_sharing.round_trip_time_avg

Identity Awareness Scaled Sharing statistics for average round trip time.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The query type:

    • single_ip_query

    • ip_range_query

    • network_query

Different data for each Virtual System.

ida.pep.scaled_sharing.round_trip_time_peak

Identity Awareness Scaled Sharing statistics for peak round trip time.

This metric is available in:

Gauge

{state}

{source_ip, type}

  • source_ip

    The source IP address.

  • type

    The query type:

    • single_ip_query

    • ip_range_query

    • network_query

Different data for each Virtual System.

ida.pep.smartpull.firewallstats

Firewall SmartPull statistics, displaying SingleRtt, AverageRtt, and Failed Request counts from kernel measurements.

This metric is available in:

AsyncCounter

{logins}

{type}

  • type

    • Single Rtt

    • Average Rtt

    • Failed Requests

Different data for each Virtual System.

ida.pep.smartpull.peaktime

PEP maximal recorded SmartPull statistics, displaying Held Packets, Register Requests, Network Requests, Failed Requests, SingleRtt, and AverageRtt peak values per PDP.

This metric is available in:

Gauge

{state}

{ip, type}

  • ip

    PDP’s IP address

  • type

    • Held Packets

    • Register Requests

    • Network Requests

    • Failed Requests

    • Single Rtt

    • Average Rtt

Different data for each Virtual System.

ida.pep.smartpull.realtime

PEP concurrent SmartPull statistics, displaying Held Packets, Register Requests, Network Requests, Failed Requests, Single Rtt, and Average Rtt values per PDP.

This metric is available in:

Gauge

{state}

{ip, type}

  • ip

    PDP’s IP address

  • type

    • Held Packets

    • Register Requests

    • Network Requests

    • Failed Requests

    • Single Rtt

    • Average Rtt

Different data for each Virtual System.

ida.unauthenticated

Total number of unauthenticated objects that Identity Awareness acquired.

AsyncCounter

{objects}

{}

 

Different data for each Virtual System.

ida.user_directory.count

Total number of User Directory queries.

AsyncCounter

{queries}

{'state'}

  • state

    Did the query succeed?

Different data for each Virtual System.