topic SNMP Paloalto in General Topics

SNMP Paloalto

DanielVe — Wed, 28 Mar 2018 15:00:11 GMT

Hello !

I want to do snmp polling to a palo alto firewall, but not using any management "software" (like zabbix). I'm trying to do it via bash command snmpget, in which i pass the object OID 1.3.6.1.2.1.25.3.3.1.2.1 (CPU util on the management plane). Something like this:

# snmpget -v 2c -c public 192.168.100.1 1.3.6.1.2.1.25.3.3.1.2.1

In which 192.168.100.1 is the firewall interface addr. The problem is that there is no response, it always gives me timeout. Could someone here give me a light if there is a easier way to do for a paloalto firewall?

Thanks =]

Re: SNMP Paloalto

jvalentine — Wed, 28 Mar 2018 15:51:28 GMT

Did you configure SNMP in these two areas:

Device / Setup / Operations / SNMP Setup

Device / Setup / Interfaces / Management / SNMP

Re: SNMP Paloalto

OtakarKlier — Wed, 28 Mar 2018 17:58:45 GMT

Hello,

To add to @jvalentine post, I would highly recommend using snmp v3 instead of v2 for security reasons.

Cheers!

Re: SNMP Paloalto

DanielVe — Thu, 29 Mar 2018 12:41:14 GMT

It was kinda my bad haha, i was using the wrong community name for the firewall 😜

Thanks for the help though =]