topic Monitoring PA-2050 (CPU, memory, Traffic volume, State) in General Topics

Monitoring PA-2050 (CPU, memory, Traffic volume, State)

jesus_cano — Fri, 18 Jan 2013 13:49:37 GMT

Hi,

I have two firewall PA (active/passive cluster) and i would like to monitoring several parameters like:

- CPU
- Memory
- Traffic volume of all physical interfaces and subinterfaces
- State of the FWS, etc.

Which is the best way to monitoring a FW Palo Alto???? What way are u using to monitoring???
Palo alto can be configured to send you an email when CPU is over 90% or something like that???

Thanks

Bye

Re: Monitoring PA-2050 (CPU, memory, Traffic volume, State)

mharding — Fri, 18 Jan 2013 15:24:04 GMT

These Cacti templates should get you up and going.

You can download a Cacti VM appliance at: CactiEZ - Home

Re: Monitoring PA-2050 (CPU, memory, Traffic volume, State)

ericgearhart — Fri, 18 Jan 2013 15:39:46 GMT

To do the CPU monitoring, memory usage monitoring, session percentage and bandwidth utilization alerting you describe I'm using Zabbix to monitor our PA devices and it works great.The Palo Alto OID guide + Zabbix gives us a huge amount of visibility into the appliances and their status.

My only gripe is that Zabbix only supports MD5 and 3DES for SNMPv3 while Palo Alto only supports SHA and AES for SNMPv3, so I can't use SNMPv3 unfortunately. That's kind of Zabbix's fault as well though... they should support SNMPv3's AES/SHA. There's a bug report with Zabbix asking for AES/SHA, looks like they have a target version for it too: https://support.zabbix.com/browse/ZBXNEXT-450

Re: Monitoring PA-2050 (CPU, memory, Traffic volume, State)

ukhapre — Thu, 31 Jan 2013 00:42:58 GMT

Hello, are you seeing syslog entries for CPU? To get notifications you can configure SNMP or syslog/email for critical alerts

Create a profile under Object -> Log forwarding and apply it to security rule -> options.