topic Re: Monitor License expiration through SNMP in General Topics

Monitor License expiration through SNMP

SOC_CSG — Fri, 13 Mar 2015 07:41:30 GMT

Hello

I manage several PaloAlto Firewall, different models and PanOS versions, through SNMP. They actually sent via "pangeneraltrap" an alarm about License Expiration one month before it, but I want to know if is it possible to monitor or check the "Date Issued" and "Date Expires" of every license installed on the Firewall through SNMP

Best regards

Gonzalo Arroyo

Re: Monitor License expiration through SNMP

jthakur — Fri, 13 Mar 2015 22:07:52 GMT

Hi Gonzalo,

In MIB files, I don't see any OID which can be used to poll license info. Using XML API you can schedule a job to fetch the issued and expires dates.

Regards,

Jugnu

Re: Monitor License expiration through SNMP

SOC_CSG — Wed, 18 Mar 2015 15:51:32 GMT

I actually receive a pangeneraltrap. It give me the information of the license and the date of expiration one moth before, it works fine. Unfortunatly I have no experience with XML API and don't know if colud be intergrated in my SNMP monitor tool.

Thanks for your help

Re: Monitor License expiration through SNMP

HULK — Wed, 18 Mar 2015 18:04:42 GMT

Hello COS,

XML API would be a perfect option for this scenario.

I have taken an example from my LAB firewall:

/api/?type=op&cmd=<request><license><info></info></license></request>

Output:

This XML file does not appear to have any style information associated with it. The document tree is shown below.

<entry>

<feature>WildFire License</feature>

WildFire signature feed, integrated WildFire logs, WildFire API

</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

</entry>

<entry>

<feature>GlobalProtect Gateway</feature>

<description>GlobalProtect Gateway License</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

</entry>

<entry>

<feature>GlobalProtect Portal</feature>

<description>GlobalProtect Portal License</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>Never</expires>

</entry>

<entry>

<feature>BrightCloud URL Filtering</feature>

<description>BrightCloud URL Filtering</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

</entry>

<entry>

<feature>Threat Prevention</feature>

<description>Antivirus, anti-spyware, vulnerability protection</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

</entry>

</licenses>

</result>

</response>

You may follow this KB doc for more detail info: PAN-OS and Panorama XML API Reference Guide 6.0

Thanks