Zabbix Fortigate VPN User List Over SNMP

[ze2user]

Hi All,
I'm trying get active ssl vpn users on Fortigate. This is the OID I use :
1.3.6.1.4.1.12356.101.12.2.4.1.3
When I check it with snmpwalk, for every user it returns something like this:
iso.3.6.1.4.1.12356.101.12.2.4.1.3.1 = STRING: "usera"
iso.3.6.1.4.1.12356.101.12.2.4.1.3.2 = STRING: "userb"
iso.3.6.1.4.1.12356.101.12.2.4.1.3.3 = STRING: "userc"
How can I add this as Zabbix SNMP item ?

[ze2user]

It would be awesome if someone helped out

[[email protected]]

Did you ever get this figured out? I am looking to do something similar,

[[email protected]]

snmpwalk -v 2c -c$SNMKEY $SERVERIP 1.3.6.1.4.1.12356.101.12.2.4.1.3 | grep -v "Such Instance" | cut -d' ' -f4 | sed 'N;s/\n/,/' | sed 's/"//g'

[tomdom]

Good morning, did you manage to do this? Showing a list of active SSL VPN users. How to make?

[tomdom]

Get on with the problem of placement, MIBs that display the user status string but when an error occurs

fgVpnSslTunnelUserName

1.3.6.1.4.1.12356.101.12.2.4.1.3

displaystring

read-only

Config Zabbix



ERROR




LINK MIB Fortigate

https://bestmonitoringtools.com/mibdb/mibdb_search.php?mib=FORTINET-FORTIGATE-MIB

[tomdom]

In MIB Browser, if I do MIB, I get the answer correctly:




Unfortunately, I have a bug in zabbix

[tomdom]

MIB 1.3.6.1.4.1.12356.101.12.2.4.1.3

If I add .1 or .2 at the end, I will display individual users. How do I do to download all?

[andyway85]

You should do a discovery rule and set the snmp oid value as: discovery[{#VPNSSLUSER},.1.3.6.1.4.1.12356.101.12.2.4.1.3]

then you can query that every x minutes and u will have all the vpn users connected

[andyway85]

btw...somethin else is needed...
on the discovery rule you can query some stuff like the users, or bandwith per user...for that you create item prototypes, set a key and also set snmp oid with index: 1.3.6.1.4.1.12356.101.12.2.4.1.7.{#SNMPINDEX}

also a recommendation is to set preprocessing rules such as change per second and custom multiplier...that will do the trick

hope it helps

[tomdom]

andryway thank you for your help. do you know any tutorials on youtube that will guide me how to set it all up?

[mickael]

Hi,
Something like :
SSL Tunnel :system.run["snmpwalk -v2c -c <Communauty> <FortiIP> 1.3.6.1.4.1.12356.101.12.2.3.1.2.2 | awk '{print $4}'"]

[botkillern]

Hello, Friend!

I don't if someone here still needing this information, but I'll post here to some one that need this solution too.

You just need to create a "Discovery Rule" with this OID:

discovery[{#SNMPVALUE},.1.3.6.1.4.1.12356.101.12.2.4.1.3]

Your rule will be like this one:



Best regards!

[botkillern]

You'll need a "Prototype Item" too. Like this:

[walter_brazolin]

Hello,

I saw that it was able to monitor the active users on the Fortigate VPN.

Could you please send me the item prototype?

Thanks,

[mikaeljs]

You'll need a "Prototype Item" too. Like this:

Hello friend, how create a prototype item in this discovery?

Can you help me please?