Cacti - Templates

cancel
Showing results for 
Search instead for 
Did you mean: 

Cacti - Templates

L2 Linker

Hello Palo Alto Community,

I created a few Cacti Templates which allow you to quickly and easily monitor Palo Alto Networks firewalls with SNMP.  There are 5 different templates corresponding to the 5 different Firewall families, PA-200, PA-500, PA-20xx, PA-40xx, PA-50xx.

Using these with Cacti (www.cacti.net), these Host templates will monitor the following sets variables, create historical graphs of these variables (example Graphs listed below):

  • Traffic the firewall is passing through each selected interface(s)
  • The number of Active Sessions (TCP, UDP and ICMP)
  • The number of Concurrent Sessions (aggregate of Active Sessions)
  • Session Utilization Percentage – Based on the PAN Firewall Model
  • Temperature of the Firewall
  • Uptime of the Firewall

If you know of other OIDs which you feel the broader community would like monitored, I would be happy to add them to the templates.

Once cacti is installed on your favorite OS, you simply connect to the Cacti web interface and import these host templates.  Then you can add devices for Cacti to SNMP Poll/Monitor and you have a long term graphical representation of what the firewall is doing, how much traffic it is seeing, how many sessions it is supporting, etc.

Hope these help,

Kameron

Interface-Traffic.pngSessions.png

Session-Utilization.png

Concurrent-Sessions.png

DataPlane-Utilization.png

Management-Utilization.png

Temperature.png

Uptime.png

38 REPLIES 38

L1 Bithead

...works great with our PA-500 but i can't see the traffic graphs on Cacti. Do i have to add them manually?

L1 Bithead

Hi,

i'm using cacti 0.8.7g and this template was exported using cacti 0.8.7h.

Then it doesn't works for me

To be able to import this template, i had to change all the hash version occurrences inside the .xml file for the correct ones.

I used sed (in a gnu/linux system) to do the trick:

sed -i -r 's/(hash_[0-9]{2})0022/\10021/g' cacti_host_template_palo_alto_firewalls_-_pa-50xx.xml

The above command, change the cacti_host_template_palo_alto_firewalls_-_pa-50xx.xml template file from cacti 0.8.7h to cacti 0.8.7g version

Hope this helps someone too

Best regards.

L1 Bithead

Hello,

i have updated your host template to be able to monitor in the correct way palo alto firewalls running pan-0s 4.1 :smileyhappy:

Best regards,

L4 Transporter

Thumbs up from me - just found this, and it worked a treat - thanks!

L0 Member

Hi,

Thanks for the templates.  However, I'm not getting any data returned.  I'm using the 20XX host template for my 3020.  I'm using Nagios as well and it is pulling data correctly.  I've checked all of the oids and they are correct.  Any ideas?

Thanks,

Todd

Not applicable

Hi, I'm fairly new to Cacti and SNMP. How do I get the interface traffic graphs up and running? I can see the graph templates in Cacti, but my assumption is I need to configure the data source some how...

I am not sure if you are just using the templates, or if you are using the VM I built.  Either way, read this document and it should get you pointed in the right direction: https://dl.dropboxusercontent.com/u/68056332/Cacti%20Virtual%20Appliance%20Documentation%20-%20Versi...

Hope this helps,

Kameron

Follow the directions in this document and you should be in good shape: https://dl.dropboxusercontent.com/u/68056332/Cacti%20Virtual%20Appliance%20Documentation%20-%20Versi...

Kameron.

Is this VM appliance available for download somewhere?

I've built my own, but I'm still having issues with some parts of the PA information, so I'd like to look at yours.

Thanks

Me  too

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!