topic Re: Panorama snmp trap in General Topics

Panorama snmp trap

hbalzac — Wed, 07 Nov 2018 18:45:08 GMT

My idea was first to setup panorama to monitor the logs for critical and then send snmp trap.

But from what i can see from the PA mibs, there are no way for panorama to send info in the trap about the device? So all i see in the trap is the panorama ip. Is there any way around this? Or is maybe best practise to trap from the individual device?

Re: Panorama snmp trap

BPry — Wed, 07 Nov 2018 20:13:38 GMT

@hbalzac,

So full disclosure, I hate snmp traps with a passion and find them very old school when other alerting methods exist.

Generally speaking I would only have the Panorama appliance send traps for Panorama, I wouldn't have it send alerts about attached devices. That being siad, their is a ton of additional information present in the email alerts if you set this up for emails instead of SNMP traps. I would also probably recommend setting up alerts on the individual firewalls as well, instead of simply monitoring Panorama for all devices. I tend to find it a little cleaner and it doesn't add much overhead at all.

Re: Panorama snmp trap

hbalzac — Wed, 07 Nov 2018 20:49:17 GMT

I hate snmp overall aswell, however in larger enterprise its not always that easy to decide what monitor equipment to use 🙂

But i will try to do it from each firewall