Monitor License expiration through SNMP

[SOC_CSG]

Hello

I manage several PaloAlto Firewall, different models and PanOS versions, through SNMP. They actually sent via "pangeneraltrap" an alarm about License Expiration one month before it, but I want to know if is it possible to monitor or check the "Date Issued" and "Date Expires" of every license installed on the Firewall through SNMP

Best regards

Gonzalo Arroyo

[jthakur]

Hi Gonzalo,

In MIB files, I don't see any OID which can be used to poll  license info. Using XML API you can schedule a job to fetch the issued and expires dates.

Regards,

Jugnu

[SOC_CSG]

Hi

I actually receive a pangeneraltrap. It give me the information of the license and the date of expiration one moth before, it works fine. Unfortunatly I have no experience with XML API and don't know if colud be intergrated in my SNMP monitor tool.

Thanks for your help

[HULK]

Hello COS,

XML API would be a perfect option for this scenario.

I have taken an example from my LAB firewall:

/api/?type=op&cmd=<request><license><info></info></license></request>

Output:

This XML file does not appear to have any style information associated with it. The document tree is shown below.

<response status="success">

<result>

<licenses>

<entry>

<feature>WildFire License</feature>

<description>

WildFire signature feed, integrated WildFire logs, WildFire API

</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

<entry>

<feature>GlobalProtect Gateway</feature>

<description>GlobalProtect Gateway License</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

<entry>

<feature>GlobalProtect Portal</feature>

<description>GlobalProtect Portal License</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>Never</expires>

<expired>no</expired>

</entry>

<entry>

<feature>BrightCloud URL Filtering</feature>

<description>BrightCloud URL Filtering</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

<entry>

<feature>Threat Prevention</feature>

<description>Antivirus, anti-spyware, vulnerability protection</description>

<serial>XXXXXXXXXXXX</serial>

<issued>January 07, 2015</issued>

<expires>January 07, 2016</expires>

<expired>no</expired>

</entry>

</licenses>

</result>

</response>

You may follow this KB doc for more detail info: PAN-OS and Panorama XML API Reference Guide 6.0

Thanks