SNMP monitor parameters for Palo Alto

[soporteseguridad]

Hello,

I have two PA500 with software version 5.0 and i would like to know if i can monitorize using SNMP (Nagios) the following parameters of my Palo Alto.

- CPU Usage dataplane and management
- memory
- Current sessions
- Hard disk space
- State and use of  interfaces

Also wanted to know if i could monitorize in Panorama these parameters:
- CPU Usage
- memory
- Disco

And the last thing........Where can i find the OID for these previous parameters???????

Thanks a lot

[ericgearhart]

soporteseguridad wrote:

Hello,

I have two PA500 with software version 5.0 and i would like to know if i can monitorize using SNMP (Nagios) the following parameters of my Palo Alto.

- CPU Usage dataplane and management
- memory
- Current sessions
- Hard disk space
- State and use of  interfaces

Also wanted to know if i could monitorize in Panorama these parameters:
- CPU Usage
- memory
- Disco

Yes (although I personally recommend and have set up Zabbix, because it gives me trending and alerting, all in one box)

soporteseguridad wrote:

And the last thing........Where can i find the OID for these previous parameters???????

Thanks a lot

Search for "SNMP" here:

Then click on the "Enterprise SNMP MIB 5.0" link

[SOC_CSG]

Hi

Some OID you requested are these:

DataPlane		1.3.6.1.2.1.25.3.3.1.2.2
Management		1.3.6.1.2.1.25.3.3.1.2.1

SessionActive	1.3.6.1.4.1.25461.2.1.2.3.3
SessionActiveTcp	1.3.6.1.4.1.25461.2.1.2.3.4
SessionActiveUdp	1.3.6.1.4.1.25461.2.1.2.3.5

INTERFACES

(BUT you need to add .NUMBER at the end for the different instances/interfaces

	for example MGMT .1
	for Ha1 .2
	for eth1/ .3

ifDescr		1.3.6.1.2.1.2.2.1.2	DESCRIPTION
ifOperStatus		1.3.6.1.2.1.2.2.1.8	Status
ifSpeed		1.3.6.1.2.1.2.2.1.5	Speed

ifInBroadcastPkts	1.3.6.1.2.1.31.1.1.1.3	Broadcast packets IN
ifInDiscards	1.3.6.1.2.1.2.2.1.13	Discard Paquets IN
ifInErrors	1.3.6.1.2.1.2.2.1.14	Errors IN
ifInMulticastPkts	1.3.6.1.2.1.31.1.1.1.2	Multicast packets in
ifInNUcastPkts	1.3.6.1.2.1.2.2.1.12	Non-unicast packets IN
ifInOctets	1.3.6.1.2.1.2.2.1.10	Octects packets in
ifInUcastPkts	1.3.6.1.2.1.2.2.1.11	Unicast packets in

ifOutBroadcastPkts	1.3.6.1.2.1.31.1.1.1.5	Broadcast packets OUT
ifOutDiscards	1.3.6.1.2.1.2.2.1.19	Discard OUT
ifOutErrors	1.3.6.1.2.1.2.2.1.20	error OUT
ifOutMulticastPkts	1.3.6.1.2.1.31.1.1.1.4	Multicast Out
ifOutNUcastPkts	1.3.6.1.2.1.2.2.1.18	Non-unicast out
ifOutOctets	1.3.6.1.2.1.2.2.1.16	Octect Out
ifOutUcastPkts	1.3.6.1.2.1.2.2.1.17	Unicast Packets OUT

Hope it help you

[mbutt]

Below document have some good information on the OIDs

Supported MIBs

https://live.paloaltonetworks.com/docs/DOC-1269

https://live.paloaltonetworks.com/docs/DOC-4129

Let us know if this helps,

Best Regard

Numan