topic Re: SNMP for Monitoring Palo Alto Networks Devices in General Topics

SNMP for Monitoring Palo Alto Networks Devices

SCoupland — Thu, 20 Jul 2017 22:16:33 GMT

Hi there,

The link https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/management-features/extended-snmp-support.html indicates that VPN tunnels can now be monitored. However the ifOperStatus and ifAdminStatus OIDs always respond that the tunnel interface is up.

Is there a way of monitoring via SNMP whether a VPN is up or down?

Regards,

SDC

Re: SNMP for Monitoring Palo Alto Networks Devices

Remo — Thu, 20 Jul 2017 22:39:56 GMT

With SNMP at least with traps ... but probably not exactly what you're looking for

Re: SNMP for Monitoring Palo Alto Networks Devices

SCoupland — Fri, 21 Jul 2017 08:57:34 GMT

Indeed. I'm looking to poll the VPN to confirm it's status.

Re: SNMP for Monitoring Palo Alto Networks Devices

Remo — Fri, 21 Jul 2017 11:28:37 GMT

If snmp isn't a "must", then the API could be something for you ...

Re: SNMP for Monitoring Palo Alto Networks Devices

OtakarKlier — Fri, 21 Jul 2017 17:10:33 GMT

Hello,

Or maybe if you ahve a SIEM you can alert on the log that gets sent? One other round about way (yes its goofy) is to use something like OSPF between the two VPN endpoints and have the PAN send an email alert on any High/Ciritcal logs.

Just a thought.