Monitor License expiration through SNMP

Reply
L4 Transporter

Monitor License expiration through SNMP

Hello

I manage several PaloAlto Firewall, different models and PanOS versions, through SNMP. They actually sent via "pangeneraltrap" an alarm about License Expiration one month before it, but I want to know if is it possible to monitor or check the "Date Issued" and "Date Expires" of every license installed on the Firewall through SNMP

Best regards

Gonzalo Arroyo

Tags (2)
L2 Linker

Re: Monitor License expiration through SNMP

Hi Gonzalo,

In MIB files, I don't see any OID which can be used to poll  license info. Using XML API you can schedule a job to fetch the issued and expires dates.

Regards,

Jugnu

L4 Transporter

Re: Monitor License expiration through SNMP

Hi

I actually receive a pangeneraltrap. It give me the information of the license and the date of expiration one moth before, it works fine. Unfortunatly I have no experience with XML API and don't know if colud be intergrated in my SNMP monitor tool.

Thanks for your help

Highlighted
L7 Applicator

Re: Monitor License expiration through SNMP

Hello COS,

XML API would be a perfect option for this scenario.

I have taken an example from my LAB firewall:

/api/?type=op&cmd=<request><license><info></info></license></request>

Output:

This XML file does not appear to have any style information associated with it. The document tree is shown below.

<response status="success">

<result>

<licenses>

<entry>

<feature>WildFire License</feature>

<description>

WildFire signature feed, integrated WildFire logs, WildFire API

</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

<entry>

<feature>GlobalProtect Gateway</feature>

<description>GlobalProtect Gateway License</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

<entry>

<feature>GlobalProtect Portal</feature>

<description>GlobalProtect Portal License</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>Never</expires>

<expired>no</expired>

</entry>

<entry>

<feature>BrightCloud URL Filtering</feature>

<description>BrightCloud URL Filtering</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

<entry>

<feature>Threat Prevention</feature>

<description>Antivirus, anti-spyware, vulnerability protection</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

</licenses>

</result>

</response>

You may follow this KB doc for more detail info: PAN-OS and Panorama XML API Reference Guide 6.0

Thanks

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!