Ad Widget

Collapse

Creating Template for PaloAlto Firewalls GlobalProtect

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • msalas
    Junior Member
    • Jun 2020
    • 3

    #1

    Creating Template for PaloAlto Firewalls GlobalProtect

    Hello all,

    Let me start off by mentioning that I am fairly new to Zabbix. I am trying to create a template for the PaloAlto Firewalls running 9.0.8. This template will monitor the gateway utilization and will graph a percentage.

    Per PaloAlto documentation, the SNMP OID for GlobalProtect are the following:
    GlobalProtect gateway utilization panGPGatewayUtilization 1.3.6.1.4.1.25461.2.1.2.5.1 PAN-COMMON-MIB
    GlobalProtect gateway % utilization panGPGWUtilizationPct.0 1.3.6.1.4.1.25461.2.1.2.5.1.1 PAN-COMMON-MIB
    GlobalProtect gateway max tunnels panGPGWUtilizationMaxTunnels.0 1.3.6.1.4.1.25461.2.1.2.5.1.2 PAN-COMMON-MIB
    GlobalProtect gateway active tunnels panGPGWUtilizationActiveTunnels.0 1.3.6.1.4.1.25461.2.1.2.5.1.3 PAN-COMMON-MIB
    ubuntu@server:~$ snmpwalk -v 2c -Of -c public 192.168.0.124 .1.3.6.1.4.1.25461.2.1.2.5.1
    .iso.3.6.1.4.1.25461.2.1.2.5.1.1.0 = INTEGER: 8
    .iso.3.6.1.4.1.25461.2.1.2.5.1.2.0 = INTEGER: 1000
    .iso.3.6.1.4.1.25461.2.1.2.5.1.3.0 = INTEGER: 86


    I have created a template but I am unsure if it is correct, I will attach below. There are no Preprocessing, LLD macros, Filters, or Overrides.

    Click image for larger version

Name:	zabbix-discovery-rule.png
Views:	2416
Size:	26.9 KB
ID:	402440

    And the item prototype: There are no preprocessing steps.
    Click image for larger version

Name:	zabbix-item-prototype.png
Views:	2324
Size:	53.4 KB
ID:	402441

    Currently, I am not getting any errors on the discovery rule for the host that it is attached to (Configureation> Host > {myhost} > Discovery Rules). The issue is that the graph does not have any data, I see [no data] on the legend. Can someone please give me some pointers?

    Note: I can share the template created afterwards for anyone who needs!

    Thanks,
    msalas
  • thpezzini
    Junior Member
    • Feb 2021
    • 1

    #2
    Hello ,

    put oid .iso.3.6.1.4.1.25461.2.1.2.5.1.3.0 in the prototype item and this is the result of the snmpwalk call

    Comment

    • eithor
      Member
      • May 2020
      • 50

      #3
      Hi,

      Have a look at existing templates, I did a merge of these two in my installation:

      The Zabbix Team has collected all official Zabbix monitoring templates and integrations.


      The Zabbix Team has collected all official Zabbix monitoring templates and integrations.


      and then added a few checks and fixes.

      Comment

      Working...