topic VM information sources Missing random Data? in VM-Series in the Public Cloud

VM information sources Missing random Data?

Sec101 — Tue, 05 May 2020 20:27:43 GMT

I have successfully turned up our vm information sources monitor on the firewall, but it appears to be missing random data, information, vlans, and networking mostly. I'm wondering if this is in relation to a timeout that is occurring because our VM's are so numerous. How would one confirm this? Almost all of the vm's I can get info on, it's just that it's missing vswitch/port/vlan id info....

Re: VM information sources Missing random Data?

Sec101 — Wed, 06 May 2020 16:59:11 GMT

bumping this

Re: VM information sources Missing random Data?

dmaynard — Wed, 06 May 2020 17:13:58 GMT

Are you using a distributed switch or standard switch?

Information is not pulled from vCenter by firewall if distributed port group is used. If standard vswitch port group is configured it pulls the Network information.

Network—Virtual Switch Name, Port Group Name, and VLAN ID

Re: VM information sources Missing random Data?

Sec101 — Wed, 06 May 2020 19:57:12 GMT

Is there a solution to this, or is this a limitation of this setup? Probably that same would happen if you directly monitored the ESXi host? That is exactly what is happening. It is using a distributed virtual switch, and that is why it's not pulling in the information.

Re: VM information sources Missing random Data?

dmaynard — Fri, 08 May 2020 05:34:53 GMT

Would look into using Panorama VMware vCenter plugin which can pull vDS info.

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-a-vm-series-firewall-on-an-esxi-server/vm-monitoring-on-vcenter/about-vm-monitoring-on-vmware-vcenter.html