- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
09-29-2017 07:56 AM
Hi-
Is there a way I can get our PA-220 to alert our SNMP monitoring system when a Policy Based Forwarding rule fails/activates?
I've set up SNMP on the firewall, added a device entry in our PRTG monitoring system, and set PRTG to automatically detect the device. It has discovered about 40 sensors, but I can't see any that relates to PBF.
We have a problem with a PBF rule failing, and I would like our monitoring screen to display whether this PBF rule is active or not.
Thanks,
T
09-29-2017 09:34 AM
I'm fairly certain this is not supported in the MIB.
09-30-2017 03:28 PM
Does anyone know if there is any other way in the Palo Alto world to signal PBF rule status?
Thanks
09-30-2017 08:28 PM
10-05-2017 04:06 PM
You can access it via the CLI: show pbf rule name <your-PBF-Policy-name>
You can script that using SSH connections with password-less keys. Just run it every X minutes and compare the "Rule State" line between runs.
Unfortunately, it will fill your logs with login/logout entries. 😞
Would be really nice if this could be polled via SNMP, or configured as an SNMP trap, or some other more automated way.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!