QoS Monitoring (for PRTG Network Monitor)

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

QoS Monitoring (for PRTG Network Monitor)

Cyber Elite
Cyber Elite

Hi all,

 

Because there are no useful methods to monitor the configured QoS values (at least til 7.0.3, I don't know if there will be a monitoring of QoS in the future), I have written a little script in powershell which gets all the required values over the XML API and the creates an output which could be used for the software PRTG Network Monitor (there is also a free version with limited amount of sensors).

 

The syntax looks like the following:

"script.ps1 <fwhostname> <physicalinterface> [<qosrule/tunnelinterface>] [tunnel-traffic]"

 

example for a cleartext rule named "Traffic-to-Internet" on ethernet1/3:

script.ps1 "firewall.domain.local" "ethernet1/3" "Traffic-to-Internet"

 

example for monitoring a tunnel-traffic rule for tunnel 10 on ethernet1/2:

script.ps1 "firewall.domain.local" "ethernet1/2" "tunnel.10" "tunnel-traffic"

 

If someone is interested, you can find the script here: https://github.com/inaxis/Palo_QoS_Mon/blob/master/Palo_QoS_Mon_Script.ps1

 

But you have to be carefully and do not run too many instances of the script at the same time towards a single firewall (specially not a pa-2000), or if you do it have a look at the management cpu utilization.

 

I tested the script on the following device/software combinations:

  • PA-5050 (PAN-OS 6.1.7)
  • PA-5020 (PAN-OS 7.0.3)
  • PA-3020 (PAN-OS 6.1.7)

The output of the devices is slightly different, so the channel which shows the dropped packets/second does not work on PA-5000 series.

 

Regards,

Remo

 

Example screenshots:

Actual bandwidth:

class-8-actual-traffic.PNG

Utilization in percent:

class-8-percentage.PNG

Dropped packets/second:

class-8-dropped-packets.PNG

6 REPLIES 6

L1 Bithead

Hello, I think your post is interesting, but I also have a question about: in what language is it written and how to put it together with PRTG Network Monitor?

Hi @javier.brito

 

The script is written in powershell. To make it work you need to place the script in the PRTG folder for custom scripts and then you need to create a new "EXE/Script Advanced" sensor and add the parameters as needed into the corresponding inputfield on the create sensor page.

 

Would be cool to know someone will actually use my solution 😉

- Where I need to apply syntax ?

- What paramater should I put to moinitor qos all class ?

@chaopov

What PAN-OS Version do you use? (Because of some changes in the API my script needs some adjustments for PAN-OS 😎

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!