Cacti - Templates

[kklein]

Hello Palo Alto Community,

I created a few Cacti Templates which allow you to quickly and easily monitor Palo Alto Networks firewalls with SNMP.  There are 5 different templates corresponding to the 5 different Firewall families, PA-200, PA-500, PA-20xx, PA-40xx, PA-50xx.

Using these with Cacti (www.cacti.net), these Host templates will monitor the following sets variables, create historical graphs of these variables (example Graphs listed below):

• Traffic the firewall is passing through each selected interface(s)
• The number of Active Sessions (TCP, UDP and ICMP)
• The number of Concurrent Sessions (aggregate of Active Sessions)
• Session Utilization Percentage – Based on the PAN Firewall Model
• Temperature of the Firewall
• Uptime of the Firewall

If you know of other OIDs which you feel the broader community would like monitored, I would be happy to add them to the templates.

Once cacti is installed on your favorite OS, you simply connect to the Cacti web interface and import these host templates.  Then you can add devices for Cacti to SNMP Poll/Monitor and you have a long term graphical representation of what the firewall is doing, how much traffic it is seeing, how many sessions it is supporting, etc.

Hope these help,

Kameron

[PeterT]

Since released back in 2012 some of these templates no longer work as Palo Alto has modified their OID's over the years.  Attached is the PA-500 v1.1 template.

http://forums.cacti.net/viewtopic.php?f=12&t=44560&p=267761#p267761

Would attach here but no idea how to attach a file in this forum

[Paupiette]

Hello

Thank's for sharing, is there any template for palo alto VM? I have some palo alto devices (PA VM 9.1.7 PA VM 8.0.5 
PA VM 8.1.2 ) that I want to graph in cacti, should I use a different template or the same you attached.

Regards

[carlosf]

Have these been updated to reflect the newer models. I'm having trouble monitoring interfaces for our PA-8xx and PA-32xx models.

Thanks!

[PeterT]

They are a community effort and I quit using Cacti sometime ago.  Feel free to update them on the Cacti site and link them.  Updating is pretty trivial, they are just definition files and OID's.

[Pramod_Abraham]

Hello Kklien,

Thanks for the above 5 Cacti templates to monitor different PAN FW KPI using Cacti . I need some help to monitor below 2 PAN FW SNMP OID in Cacti for packet buffer utilization % and session util %. Can you create or update the existing Cacti template for the below 2 SNMP OID?

1. PANOS % Session utilization - .1.3.6.1.4.1.25461.2.1.2.3.1.0
2. PANOS CPU - Data Plane - .1.3.6.1.2.1.25.3.3.1.2.2

Sincerely

-PA