The Umbrella Documentation Hub

Welcome to the Umbrella documentation hub. Here you'll find access to all of our Cisco Umbrella user guides.

Get Started    

Appendix C – SNMP Monitoring

Umbrella virtual appliances (VA) supports Simple Network Management Protocol (SNMP) based monitoring of health and connectivity statistics.

SNMP monitoring of a VA is disabled by default. SNMP monitoring is enabled and configured through the Configuration Mode.

Both SNMPv2c and SNMPv3 are supported.

  1. Enter the Configuration Mode on the VA.
  2. Enable SNMP monitoring.
  3. Return to the VA console. Enter exit
Usage : config snmp <options> <args>
      options must be one of the following:
      configure        -v2 [-c <Community String>]
                          Configure and enable SNMP v2
                          * c – Optional Community string for SNMPv2.
                       -v3 -u <username> -p <password> [-a [MD5|SHA] -x [AES|DES] -X [password]]
                          Configure and enable SNMP v3 with username and password 
                          * u - Username consist of alphanumeric characters up to 32 characters
                          * p - Password consist of alphanumeric characters between 8 to 12 characters
                          * a - Optional password hash algorithm; Default is SHA
                          * x - Optional encryption algorithm; Default is AES
                          * X - Privacy password to be used along with AES algorithm
        enable        Enable SNMP
        disable       Disable SNMP
        status        Show SNMP service status and version information
        - h,  --help  Display this usage information

SHA-1, DES-128 and AES-128 algorithms are used.

Note: Username and Password are mandatory when configuring SNMPv3. All other parameters are optional.

If your VA is running version 2.3 or earlier, use the command: support snmp <options> <args>. Do not use the command: config snmp <options> <args>.

Username and Password are mandatory when configuring SNMPv3. All other parameters are optional.

SHA-1, DES-128 and AES-128 algorithms are used.

The VA listens on port 161 for SNMP queries.

The VA supports SNMP monitoring of health statistics—CPU, load, memory, disk space, and status—as well as connectivity statistics (connectivity to Umbrella resolvers, connectivity to the local DNS servers, connectivity to AD connector and connectivity to the Umbrella API).

Standard OIDs Supported by the Virtual Appliance



Load-1 (1 minute load): .
Load-5 (5 minute load): .
Load-15 (15 minutes load): .

If the five minute load is consistently greater than (.75 * Number of processor cores), the VA is running short of processing power.


Percentage of user CPU time: .
Percentages of system CPU time: .
Percentages of idle CPU time: .

Memory Utilization

Available swap: .
Total swap: .

If the ratio of Available swap to Total swap is consistently lower than 0.5, the VA is running low on memory.

Disk Usage

Percentage of space used on data portion of disk: .

If this value is consistently greater than 0.8, the VA may be running out of disk space.

Note: The VA supports the querying of the system OIDs ( to

Extended OIDs Supported by the Virtual Appliance

Note: In case an SNMP probe against any of these OIDs results in a timeout, you will need to increase the timeout value when issuing the probe.


VA status (thisdns)


Connectivity to Umbrella resolvers (dns)


Connectivity to local DNS servers (localdns)


Connectivity to Umbrella dashboard (cloud)


Connectivity to AD connectors (ad)


For each extended OID, search for the following sub-strings in the output:

  • "green"—Indicates a status of Okay.
  • "red"—Indicates a status of Not Okay.
  • "yellow"—indicates a status of Partially Okay.
  • "white"—indicates a status of Not Configured.

Appendix B – Sizing Guide < Appendix C – SNMP Monitoring > Appendix D – Troubleshoot Virtual Appliances

Updated 4 months ago

Appendix C – SNMP Monitoring

Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.