SNMP: Threat Counter or "ACC Risk Factor"

[KetchupKaffeetasse]

Hello all,

we have 2 PA-850 Firewalls with Pan OS 10.1 and I would like to read out the ACC Risk Factor via SNMP.
Unfortunately I have not found anything in the SNMP Mibs.
Does anyone have a tip for me?

Best regards

[kiwi]

Hi @KetchupKaffeetasse ,

There's an older thread indicating this was impossible at the time: https://live.paloaltonetworks.com/t5/automation-api-discussions/read-acc-risk-factor-with-api-or-snm...

You might want to add your vote to the existing feature request for this (FRID #1912:  Support for ACC risk factor via SNMP).

As a workaround you might want to try achieving this using API ?

http://x.x.x.x/api/?type=report&reportname=top-application-risk-summary&reporttype=dynamic&period=last-30-days">http://fw/api/?type=report&reportname=top-application-risk-summary&reporttype=dynamic&period=last-30...

This should give the #sessions and #bytes for each risk level for the specified period, and the monitoring tool can calculate a weighted risk similar to the one shown on ACC.

Hope this helps.

-Kiwi.