Monitoring the firewall

zakergfx — Sat, 02 Dec 2023 12:11:20 GMT

Hello,

i would like to monitor the firewall using centreon. Unfortunately we are using the free version so we dont have access to the snmp and ssh plugins packs and we have to do everything by ourselves.

To get CPU, uptime information and so on i can use snmp using OID. However to get more detailled informations i would like to run ssh command remotely.

The problem is that when i try to execute an ssh command it get stuck and nothing happened (while when i directly connect to a shell it works).

For example this work : ssh admin@paloaltovm

but this does not work : ssh admin@paloaltovm "show system resources"

Is there anything i can do to solve that ? thank you

Re: Monitoring the firewall

kiwi — Tue, 05 Dec 2023 12:50:14 GMT

Hi @zakergfx ,

I have no experience using SSH on the PA like that (adding additional commands after the SSH connect) but I've found some similar discussions on the same topic so my guess is that it isn't supported.

I suggest using an expect script instead:

https://live.paloaltonetworks.com/t5/api-articles/scripts-expect-scripts-for-operational-and-config-automation/ta-p/59712

or even using XML API.

Kind regards,

-Kim.

topic Re: Monitoring the firewall in General Topics

Monitoring the firewall

Re: Monitoring the firewall