SNMP - partial monitoring (monitoring restricted)

[Thiago]

Hi,

I would like to know if it is possible to create an SNMP community and restrict access so it can monitor ONLY ONE interface of the firewall Palo Alto. Should not be able to monitor eg CPU utilization and memory firewall.

tks,

Paulo Aun

[UhMayYeah · Accepted solution]

You can restrict SNMP service to only single interface using a combination of following settings:

• Management Interface : Management Interface Settings (Device>Setup>Management Interface Settings)
• Dataplane interfaces : Interface management profiles (Ref :Firewall Management Using a Layer 3 Interface

It is not possible to selectively enable polling of certain OIDs using SNMP v2 (community), you may configure SNMPv3 views and use the appropriate mask to allow polling only certain OIDs.

How to Setup SNMPv3 Polling.