Checking status and health of managed appliances using the CLI

Prev Next

Use the commands in this section to check the status and health of managed appliances.

To view status:
  1. Go to CLI enable mode:

    hostname > enable
  2. View status:

    • To view high-level status of all appliances:

      hostname # show cmc appliances brief
    • To view health check criteria and detailed status information:

      hostname # show cmc status
    • To view the connection status of all appliances:

      hostname # show cmc appliances
    • To view comprehensive information about a specific appliance:

      hostname # show cmc appliances <applianceName>
    • To view comprehensive information about all appliances:

      hostname # show cmc appliances detail

Note

You can also run Network Security network deployment checks using the cmc execute appliance <NXApplianceName> command deployment check commands. For details, see the Network Security System Administration Guide.

Examples

show cmc appliances brief

This example shows that three appliances are enabled for Central Management System management, one appliance is disconnected, and two appliances failed status checks.

hostname # show cmc appliances brief
Appliance          Address      Enabled   Connected  Health   Product
---------          -------      -------   ---------  ------   -------
ex-03              172.30.1.1   yes       no         CRIT     eMPS
nx-02              172.70.1.1   yes       yes        ok       wMPS
fx-04              172.20.1.1   yes       yes        WARN     fMPS
nx-01              172.70.2.1   yes       yes        ok       wMPS
nx-05              172.40.1.1   yes       yes        ok       wMPS
show cmc status

This example shows the status check settings and criteria, and then shows the status of each appliance that can be managed by this Central Management System appliance.

hostname-01 # show cmc status
Status checking enabled:  yes
Check interval:           60 seconds
Timeout:                  30 seconds

Status criteria:
   "alive" test enabled:           yes
   "content-key" test enabled:     yes
   "disk_space" test enabled:      yes
   "eula" test enabled:            yes
   "fan" test enabled:             yes
   "feature: test enabled:         yes
   "power_supply" test enabled:    yes
   "product_key" test enabled:     yes
   "raid" test enabled:            yes
   "support_key" test enabled:     yes
   "temperature" test enabled:     yes
   "user_role" test enabled:       yes
	
Appliance ex-03:
Last checked:               2014/12/23 21:28:02
Connected at last check:    no
Replied to last check:      no
Last check succeeded:       no
Failed checks: 
   alive failed
   content_key failed
   disk_space failed
   eula failed
   fan failed
   feature failed
   power_supply failed
   product_key failed
   raid failed
   support_key failed
   temperature failed
   user_role failed

Appliance nx-02:
Last checked:               2014/12/23 21:28:02
Connected at last check:    yes
Replied to last check:      yes
Last check succeeded:       yes

Appliance fx-04:
Last checked:               2014/12/23 21:28:02
Connected at last check:    yes
Replied to last check:      yes
Last check succeeded:       no
Failed checks: 
   content_key failed
show cmc appliances

This example displays the status of each appliance that can be managed by this Central Management System appliance. In this case, the Network Security appliance initiated the request to be managed, the Email Security — Server appliance is not currently connected, and the Central Management System appliance initiated the connection between itself and the File Protect appliance.

hostname # show cmc appliances

Appliance nx-02:
   Address:                   172.70.1.1
   Enabled:                   yes
   Connected:                 yes (client-initiated)
   Status check OK:           yes
   Version compatible:        yes

Appliance ex-03:
   Address:                   172.30.1.1
   Enabled:                   yes
   Connected:                 no
   Status check OK:           no
   Version compatible:        unknown

Appliance fx-04: 
   Address:                   172.20.1.1
   Enabled:                   yes
   Connected:                 yes (server-initiated)
   Status check OK:           no
   Version compatible:        yes		
show cmc appliances <applianceName>

This example displays the status and settings for the nx-02 appliance. The Central Management System appliance initiated the connection with the appliance.

hostname # show cmc appliances nx-02
Appliance nx-02

Connection status:
   Connected:                    yes (server-initiated)
   Connection failure reason:    None
   Connection last formed:       2014/12/23 21:13:37    
   Connection last broken:       2014/12/23 21:13:36
   Last connection attempt:      2014/12/23 21:13:36
   Next connection attempt: 
   Current time:                 2014/12/23 21:25:36
   Status check OK:              yes
   Server username on client:    admin
   Client username on server:    cmcclient

Appliance Status:
   Client software version:      wMPS (wMPS) 7.7.0.420682
   Client product name:          wMPS Power          
   Client software match:        no
   Client software compatible:   yes

   Appliance ID:                 002590AEE884
   Product model:                FireEyeNX900
   Content version:              432-lb.198
   Content channel:              stable
   Content sharing type:         all

Configuration: 
   Enabled:                  yes
   Address:                  172.10.0.0
   SSH port:                 22
   Web UI protocol:          http
   Web UI HTTP port:         9023 (active)
   Web UI HTTPS port:        443
   Auto-connect:             yes
   Status check enabled:     yes
   Client requests enabled:  yes
   Comment: 

   Authentication:
      Authentication type:   password
      password username:     admin
      password password:     ********
      ssh-dsa2 username:     admin
      ssh-dsa2 identity:
      ssh-rsa2 username:     admin
      ssh-rsa2 identity:  

Validation for client-initiated connections: 
   Source address:          (same as main address)
   Source port:             (no restriction)   
		
show cmc appliances detail

The show cmc appliances detail command output is the same as the show cmc appliances <applianceID> command output, except it displays information about all managed appliances, not just one.