topic System health indicators, what systems should be monitored on the firewall to determine the overall health of the firewall? in General Topics

System health indicators, what systems should be monitored on the firewall to determine the overall health of the firewall?

tstores — Mon, 10 Mar 2014 15:58:58 GMT

What would be the best way to determine the current overall health of a firewall? What system indicators should be constantly checked?

Thanks

Re: System health indicators, what systems should be monitored on the firewall to determine the overall health of the firewall?

HULK — Mon, 10 Mar 2014 16:55:18 GMT

Hello Sir,

You can run CLI command > show system environmentals --- to check the individual component of a PAN firewall. As per my knowledge, you look at the SYSTEM logs under Monitor >> Logs >>System, it will show you all health related information, events on the PAN firewall.

There is an option to setup email alerts also : How to Setup Email Alerts

Thanks

Re: System health indicators, what systems should be monitored on the firewall to determine the overall health of the firewall?

_slv_ — Mon, 10 Mar 2014 18:06:25 GMT

In my opinion You should consider about percentage of active firewall session and data/management plane utilization.

You can use SNMP (cacti/zabbix) for that or for just start Pan(w)achrome 0.7

Please read this topics

https://live.paloaltonetworks.com/message/32069#32069

https://live.paloaltonetworks.com/docs/DOC-5636

Regards

SLawek