I'm using SCOM 2012 and I've added a Cisco ASA 5520 as a network device using SNMP. Discovery was successful, but after around 15 minutes a warning appeared stating "Device XXXXXXX is not responding to either ICMP or SNMP requests. Use health explorer to further troubleshoot this issue.". After another 15 minutes this warning had resolved itself. This cycle repeats itself around every 15 mins. The device will switch between a warning and healthy state, and the only performance counter I get is ICMP ping. Using health explorer I can see that there is an SNMP Ping failure, but all of the 'Node Tasks' including SNMP GET and SNMP Walk work without any problems. I've also setup around 40 other network devices without any problems. Any ideas? Thanks, Andy.

Not sure Andy, seems like a transient situation only during the beginning. Dont know why. Keep an eye on it to see if it returns other than network outage of course.Bob Cornelissen - BICTT (My Blog about SCOM) - MVP 2012 and Microsoft Community Contributor 2011 Recipient

Sorry Bob, I missed out the part where this cycle repeats itself around every 15 mins. The device will switch between a warning and healthy state, and the only performance counter I get is ICMP ping.

Hi, Firstly, please double-check the settings on both the server and the device sides. Monitoring Networks by Using Operations Manager http://technet.microsoft.com/en-us/library/hh212935.aspx Regarding the issue, please see if the following thread helps: Monitor network device connectivity and alert after 3 trail http://social.technet.microsoft.com/Forums/en-IE/operationsmanagermgmtpacks/thread/2073e672-2e40-4f5b-a252-38af5b865968 Thanks. Nicholas Li TechNet Community Support

Hi Nicholas, Thanks for your reply, but I'm afraid that I still haven't been able to resolve the issue. I can see that there are SNMP GET timeout errors in the Windows event log (below), but as mentioned earlier, I am able to run both the SNMP GET and SNMP Walk tasks in the Ops manager console successfully. Log Name: Operations Manager Source: Health Service Modules Date: 22/05/2012 7:29:20 AM Event ID: 11013 Task Category: None Level: Error Keywords: Classic User: N/A Computer: XXXXXXXXXXXXXXX Description: SNMP GET request to IP Address xxx.xxx.xxx.xxx has timed out. This can be due to the device being offline or to the workflow using incorrect credentials. One or more workflows were affected by this. Do you have any other advice on how I might troubleshoot this? Thanks, Andy.

Hi Nicholas, Thanks again for your reply, and I have read through the blog post. I have checked the points that it raises, but still can't resolve the issue. On the Cisco ASA device I can see that there are some 'Too big errors' in the SNMP packets output. 9 SNMP packets input 0 Bad SNMP version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 58 Number of requested variables 0 Number of altered variables 9 Get-request PDUs 0 Get-next PDUs 0 Get-bulk PDUs 0 Set-request PDUs (Not supported) 9 SNMP packets output 2 Too big errors (Maximum packet size 512) 0 No such name errors 0 Bad values errors 0 General errors 9 Response PDUs 0 Trap PDUs Unfortunately a Cisco support forum post suggests that the maximum packet size isn't something that can be changed. Do you think this may be the cause of the issue, and do you have any other suggestions? Thanks, Andy.

Hi, Thank you for your response. Regarding the Event 11013, please check it referring to the following post What Gets Monitored with System Center Operations Manager 2012 Network Monitoring http://blogs.technet.com/b/momteam/archive/2011/09/20/what-gets-monitored-with-system-center-operations-manager-2012-network-monitoring.aspx Thanks. Nicholas Li TechNet Community Support