Enabling HTTP health checks for Network Security monitoring ports on AWS

You can enable an HTTP server running on monitoring ports to respond to HTTP health check heartbeats. The health check functionality can be used to monitor the health of the Network Security instance.

To enable HTTP health checks:

Log in to the Network Security CLI.
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Enable HTTP health checks:
hostname (config) # policymgr interface <port-pair> health-check http port <port>
where interface is the interface pair and port is the port number (1–65535) on which the HTTP server is running.
Verify your changes:
hostname (config) # show policymgr interfaces

To disable HTTP health checks:

Log in to the Network Security CLI.
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Disable HTTP health checks.
To disable health checks on all HTTP ports configured on an interface:
hostname (config) # no policymgr interface <port-pair> health-check http
To disable health checks on a specific HTTP port configured on an interface:
hostname (config) # no policymgr interface <port-pair> health-check http port <port>
Verify your changes:
hostname (config) # show policymgr interfaces

Examples

The following example enables HTTP health checks on interface pair A using port 80.

hostname (config) # policymgr interface A health-check http port 80
hostname (config) # show policymgr interfaces

Policy enabled: yes

Interface A
  Active        : yes
  op mode       : block (enforcing)
  fail-safe     : close
  policy        : mixed
  tolerance     : 1
  Ports         : pether3 pether4
  QinQ          : no
  QinQ-evt      : 0x88a8
  Health Port   : 80

The following example disables HTTP health checks on interface pair A.

hostname (config) # no policymgr interface A health-check http
hostname (config) # show policymgr interfaces

Interface A
  ...
  Health Port   :