PaloAlto Passive Firewall Monitoring in HA Setup

USER111 — Sun, 29 Dec 2024 17:56:05 GMT

Hi everyone,
Greetings!

I’m currently using OpManager to monitor a Palo Alto firewall in an HA Active/Passive setup, and the Link State of the interfaces on the passive device is set to auto.
While OpManager is able to correctly pull interface details from the active firewall, I am experiencing issues with the interface status of the passive firewall. The interface status for the passive firewall is showing as down in OpManager, while the GUI on the actual firewall shows the interface as up.

Are there any changes I can make in the firewall configuration to ensure that OpManager can fetch the interface details from the passive firewall correctly?

Any insights on this issue would be greatly appreciated.
Thanks in advance!

Re: PaloAlto Passive Firewall Monitoring in HA Setup

JayGolf — Thu, 02 Jan 2025 22:41:32 GMT

Hi @USER111 ,

Are you hoping to poll the data interfaces on the passive device? The data interfaces are technically "up" but operationally inactive and do not participate in network activity in any way until the system becomes active. Im not sure what you can change on the firewall to monitor the data interfaces, but if you wanted to monitor the device, you can point SNMP to the management IP of the passive fw.

topic Re: PaloAlto Passive Firewall Monitoring in HA Setup in General Topics

PaloAlto Passive Firewall Monitoring in HA Setup

Re: PaloAlto Passive Firewall Monitoring in HA Setup