We have a PA500 box running 4.1.11 software.
Formerly we used pfsense enjoying RRD graphing of traffic amount on the different interfaces. We display network information on a big monitor outside our office. Does anyone here use some thirdparty software to achieve this with PAN boxes? We don't need all the bells and whistles, and it should be easy to configure.
Thanks for help and comments on this..
Third Party Suggestion : Cacti :https://live.paloaltonetworks.com/thread/4367
2>Monitor Tab>App Scope
3>QOS enabled on interface https://live.paloaltonetworks.com/message/21764#21764
I have Zabbix watching several pairs of PA firewalls as well, and graph trending on interfaces, CPU, memory, firewall sessions, etc all work.
Also alerting on specific events works too (for example: "if the session table goes over 80% utilization send an alert")
slv - honestly the low level discovery features built in to Zabbix 2.0 and 2.2 should make it really easy to walk the Palo Altos and automatically discover interfaces and build graphs, without needing to template out interfaces.
I can export what I have (which mostly provides graphs of the session table, management and data plane CPU usage, number of sessions broken down by TCP, UDP, etc) but for simple interface graphs use low level discovery! It really is the best way to go
I would highly recommend you start off with Zabbix 2.2, there are a bunch of critical SNMP fixes in that version. Also Zabbix 2.2 implements AES/SHA support for SNMPv3, which Palo Alto requires for SNMPv3 (otherwise you're forced to use SNMPv2, which is completely clear text... not a good solution to start off with).
Zabbix 2.2 isn't released yet, but there's supposed to be a beta out by the middle of June.
I know that automatically discover is working and I have now graphs of traffic. I'm asking you because You have much more (CPU, memory, firewall sessions and >>alerting<<)
If you can export template and send it to me I will be very grateful.
I started playing with zabbix few days ago, I have to learn a lot to build my own template. Good example will be very appreciated.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!