Cacti - Templates

Reply
L2 Linker

Cacti - Templates

Hello Palo Alto Community,

I created a few Cacti Templates which allow you to quickly and easily monitor Palo Alto Networks firewalls with SNMP.  There are 5 different templates corresponding to the 5 different Firewall families, PA-200, PA-500, PA-20xx, PA-40xx, PA-50xx.

Using these with Cacti (www.cacti.net), these Host templates will monitor the following sets variables, create historical graphs of these variables (example Graphs listed below):

  • Traffic the firewall is passing through each selected interface(s)
  • The number of Active Sessions (TCP, UDP and ICMP)
  • The number of Concurrent Sessions (aggregate of Active Sessions)
  • Session Utilization Percentage – Based on the PAN Firewall Model
  • Temperature of the Firewall
  • Uptime of the Firewall

If you know of other OIDs which you feel the broader community would like monitored, I would be happy to add them to the templates.

Once cacti is installed on your favorite OS, you simply connect to the Cacti web interface and import these host templates.  Then you can add devices for Cacti to SNMP Poll/Monitor and you have a long term graphical representation of what the firewall is doing, how much traffic it is seeing, how many sessions it is supporting, etc.

Hope these help,

Kameron

Interface-Traffic.pngSessions.png

Session-Utilization.png

Concurrent-Sessions.png

DataPlane-Utilization.png

Management-Utilization.png

Temperature.png

Uptime.png

L7 Applicator

Re: Cacti - Templates

These are great.  Thanks for sharing!

L2 Linker

Re: Cacti - Templates

Thanks.

And for those having trouble importing template, how to fix version checking in cacti with xml version hash error

http://docs.cacti.net/howto:determine_cacti_template_version

L6 Presenter

Re: Cacti - Templates

Nice work! Thanks for sharing! :-)

L1 Bithead

Re: Cacti - Templates

nick work! thanks for sharing!

L4 Transporter

Re: Cacti - Templates

I've built the equivalent of these graphs in Zabbix as well... Zabbix allows you to do some interesting things as well, such as "if the last retrieved uptime raw value is less than 600 seconds, send an alert" (i.e. if the firewall has rebooted in the last ten minutes, throw an alert), or "if the SNMP queried temperature is over X, send an alert"

Unfortunately Zabbix doesn't support SHA/AES for SNMPv3, and the Palo Altos we have don't seem to support MD5/3DES, so I ended up having to use SNMPv2

If anyone's interested I can post them here, or open a new thread

L3 Networker

Re: Cacti - Templates

I'm interested in those Zabbix templates thanks. Would you mind posting them?

Not applicable

Re: Cacti - Templates

Thanks for the templates.

Have you graphed traffic utilization on sub interfaces?  some reason I'm struggling with this <maybe cause i'm new to cacti>  I'm running cacti 0.8.8a

Highlighted
L2 Linker

Re: Cacti - Templates

Jerrold,

Currently, there isn't any SNMP support for Sub-interfaces.  There are feature requests for this, so you may want to speak with your local PANW SE and have them add you and your company to the FR.

Thanks,

Kameron

L4 Transporter

Re: Cacti - Templates

quinton - sorry for the late reply.

I will try to export the Zabbix hosts I've built... we're monitoring our 4020 and a pair of 5020s with Zabbix and it's working great. I'll start a new thread and post them there.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!