Zabbix + Firewalls

Use this template to monitor Checkpoint firewalls interfaces and packet filtering.The following value map must be created for the Checkpoint templates collection :"Checkpoint standard status"0 ⇒ OK1 ⇒ Warning2 ⇒ ErrorThe advsnmp.discovery external script (https://github.com/simonkowallik/Zabbix-Addons/tree/master/advsnmp.discovery) is also needed by most templates.Last, the SNMP items reference the CHECKPOINT-MIB (chkpnt.mib, see https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit\_doGoviewsolutiondetails=&solutionid=sk90470#Check Point SNMP MIB files for all products) so it must be properly installed on your Zabbix server.

This will work on NSA 3x00 and 4x00 series firewalls. Derive form the 3600/400 one that is in Portuguese. This one is in English.

Template for monitoring Firebox Watchuard M400 Firewall with explanations and advices. The mibs are there: https://www.watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/basicadmin/snmp_about_mibs_c.htmlThe content of template:6 Applications: CPU, Disk Partitions, General, Interfaces, Memory, Traffic rules10 SNMPv2 and calculated itemsCached memory, Swap used space, Free physical memory in%, Total physical memory, ping check, Device localtion, uptime, description, name4 LLD rules for:a) Access rules - taken from template M300 (thanks) to discover traffic on access rules with graphb) Disk partitions - with filter in post processing to discover (/var, /boot, /, and /tmp) - total and used spacec) Network interfaces - discover incoming/outgoing traffic, operational state and inbound/outbound errors on interface (need to enable) + trigger and graph. To not discover no need interface like virtual or loopback create in Administration->General-> Regular expressions a rule to not allow per example virtual interfaces: (?!)Virtual -result FALSEd) Processors - discover and monitor with trigger the load on processors