topic Re: Monitoring Virtual Systems on Solarwinds in General Topics

Monitoring Virtual Systems on Solarwinds

a.jones — Tue, 16 Apr 2019 10:16:52 GMT

Hi All,

Can I monitor my Virtual Systems on Solarwinds - SNMP and Ping? They are configured with shared aggregated interfaces and not indivdual physical interfaces. I am monitoring the device itself but would like visibility of the individual virtual systems.

I read an older post that only physical interfaces could be monitored but not sure if that changed.

Regards

Adrian

Re: Monitoring Virtual Systems on Solarwinds

OtakarKlier — Tue, 16 Apr 2019 16:06:24 GMT

Hello,

Yes this is possible. I would recommend using snmpv3.

Regards,

Re: Monitoring Virtual Systems on Solarwinds

Remo — Tue, 16 Apr 2019 18:46:05 GMT

Hi @a.jones

All accessible OIDs are already available on the management interface - in other words whereever you allow snmp with interface management profiles you can monitor ALL OIDs of the device an all vsys - as long as yoi do not restrict it with snmpv3 permissions/views.

@OtakarKlier why would you recommend snmpv3? What is your use case where you need snmpv3? So far I always used snmpv2 as the access is already restricted on the management interface also with additional firewalls where the mgmt interface is located behind them. And mainly because paloalto only offers snmp read so far I don't see a big advantage of encrypting this huge amount of queries.

Re: Monitoring Virtual Systems on Solarwinds

OtakarKlier — Tue, 16 Apr 2019 18:51:01 GMT

Hello @Remo ,

snmpv2 is plain text so someone sniffing could scape data to gain insight into the environment. Also customer requirements and/or regulations, some industries require it. But since snmpv3 is secure and encrypted, we are security oriented right ;).

Cheers!

Re: Monitoring Virtual Systems on Solarwinds

Remo — Tue, 16 Apr 2019 19:08:09 GMT

@OtakarKlier wrote:
Also customer requirements and/or regulations, some industries require it.

Got it. But for other situations I still represwnt the opinion that if an attacker is able so sniff traffic in our firewall management networks then I have a lot bigger problems than someone is able to see what PAN-OS version is installed or how many users are connected with global protect 😜

@OtakarKlier wrote:
We are security oriented right ;).

Of course we are 😉