threshold values for SNMP Monitoring PA-5250

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

threshold values for SNMP Monitoring PA-5250

L0 Member

Hi,

How much RAM does a PA-5250 have? And which threshold value should be defined for alarming in SNMP Monitoring?

And what other oid make sense to monitor and which hreshold value?

 

e.g. count of Sessions: Data Sheet 8.000.000, but what would be a appropriate threshold value?

 

Thanks a lot

 

Robert

2 REPLIES 2

Cyber Elite
Cyber Elite

The management plane has 32GB of which it uses 9GB. 90% usage would be alarming

 

the appropriate threshold of active sessions will depend on your traffic mix. I'd first establish a baseline and then set alerting if you go a considerable amount over that as that indicates an irregularity on your network vs trying to monitor the firewall when it maxes out because then you simply set it to 95%, but that doesn't tell you much

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Hi and thanks for your response.

 

90% of 9 GB should be the alarming Threshold?

 

Our 5250 actually uses 4.5 GB of Memory

So i set

-w 6750 -c 8100 -l Memory -u MB

 

Max Sessions @ Datasheet 8.000.000

Our old 5050 max Sessions @ Datasheet 2.000.000 "died" at around 220.000 Sessions (average 900 byte per packet). No Limit of Datasheet has been reached.

So difficult to say and to baseline. I now just set warning to 800.000 and critical to 880.000.

 

Because of lack of performance and SNMP Monitoring features of our old PA-5050 we used Rest API for monitoring each core of the Firewall. But this API Request have slowed down the management plane, so we had to disable it.

 

So now we have the PA-5250.

Any other values (regarding to performance) to monitor?

 

regards

 

Robert

  • 2291 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!