SNMP: Threat Counter or "ACC Risk Factor"

KetchupKaffeetasse — Tue, 13 Jul 2021 08:03:34 GMT

Hello all,

we have 2 PA-850 Firewalls with Pan OS 10.1 and I would like to read out the ACC Risk Factor via SNMP.
Unfortunately I have not found anything in the SNMP Mibs.
Does anyone have a tip for me?

Best regards

Re: SNMP: Threat Counter or "ACC Risk Factor"

kiwi — Thu, 15 Jul 2021 11:08:51 GMT

Hi @KetchupKaffeetasse ,

There's an older thread indicating this was impossible at the time: https://live.paloaltonetworks.com/t5/automation-api-discussions/read-acc-risk-factor-with-api-or-snmp/td-p/18612

You might want to add your vote to the existing feature request for this (FRID #1912: Support for ACC risk factor via SNMP).

As a workaround you might want to try achieving this using API ?

http://x.x.x.x/api/?type=report&reportname=top-application-risk-summary&reporttype=dynamic&period=last-30-days">http://fw/api/?type=report&reportname=top-application-risk-summary&reporttype=dynamic&period=last-30-days

This should give the #sessions and #bytes for each risk level for the specified period, and the monitoring tool can calculate a weighted risk similar to the one shown on ACC.

Hope this helps.

-Kiwi.

topic SNMP: Threat Counter or "ACC Risk Factor" in General Topics

SNMP: Threat Counter or "ACC Risk Factor"

Re: SNMP: Threat Counter or "ACC Risk Factor"