Notification

Icon
Error

Palo Alto Firewalls

Posted: Wednesday, April 3, 2019 2:17:01 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 2,037
7
Like
Hey everyone,

Below you can find a custom OID file for import into Lansweeper to monitor some vital information on your Palo Alto firewalls.

To get started simply do the following:

Verify that your Lansweeper is on version 7.1 or higher. If needed you can update here.
  • Download the OID file below.
  • Import the OID file.
  • Make sure to verify the target is correct, I created a new dynamic group with all Palo Alto devices.
  • Rescan your Palo Alto devices.
Palo Alto OIDs Download OID Import File
Type Dynamic Asset Group
TargetUndefined
ManufacturerUndefined
ModelUndefined
Mapped SNMP data
Label CPU util on management plane
OID 1.3.6.1.2.1.25.3.3.1.2.1
Label Utilization of CPUs on dataplane that are used for system functions
OID 1.3.6.1.2.1.25.3.3.1.2.2
Label Management plane memory and dataplane packet buffer
OID 1.3.6.1.2.1.25.2.3
Label % session utilization
OID 1.3.6.1.4.1.25461.2.1.2.3.1.0
Label GlobalProtect gateway % utilization
OID 1.3.6.1.4.1.25461.2.1.2.5.1.1
Label VSYS session % utilization
OID 1.3.6.1.4.1.25461.2.1.2.3.9.1.3.1
Label Active TCP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.4.0
Label Active UDP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.5.0
Label Active ICMP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.6.0
JacobH
#1JacobH Member Posts: 176  
posted: 4/3/2019 2:42:25 PM(UTC)
Thank you for this!
JTempleton
#2JTempleton Member Posts: 46  
posted: 4/5/2019 8:11:57 PM(UTC)
Here is another OID you can use for the Palo Alto:

GlobalProtect gateway active tunnels: 1.3.6.1.4.1.25461.2.1.2.5.1.3.0
Dov
#3Dov Member Posts: 37  
posted: 4/8/2019 7:22:38 PM(UTC)
Ever since custom OID scanning became available I've been trying to have Lansweeper pull the PANOS version from the firewalls, with no luck, Lansweeper shows 'No data found'.
The OID is 1.3.6.1.4.1.25461.2.1.2.1.1, doing a MIB walk confirms it.
Has anyone else tried the same OID with better results?
Cheers,
Dov

JTempleton
#4JTempleton Member Posts: 46  
posted: 4/9/2019 3:02:52 PM(UTC)
Originally Posted by: Dov Go to Quoted Post
Ever since custom OID scanning became available I've been trying to have Lansweeper pull the PANOS version from the firewalls, with no luck, Lansweeper shows 'No data found'.
The OID is 1.3.6.1.4.1.25461.2.1.2.1.1, doing a MIB walk confirms it.
Has anyone else tried the same OID with better results?
Cheers,
Dov



Good day!

Change the OID to: 1.3.6.1.4.1.25461.2.1.2.1.1.0
studerje
#5studerje Member Posts: 7  
posted: 4/23/2019 9:33:38 PM(UTC)
Very helpful.
on ours, i also added
System Uptime OID 1.3.6.1.2.1.25.1.1.0
GlobalProtect client package version: 1.3.6.1.4.1.25461.2.1.2.1.15.0
HA State: 1.3.6.1.4.1.25461.2.1.2.1.11.0
HA Peer State: 1.3.6.1.4.1.25461.2.1.2.1.12.0
System Software Version: 1.3.6.1.4.1.25461.2.1.2.1.1.0

If I did it correctly, I've added my exported oid file.
Handles attachments
Palo_Alto_Firewall_oidtargets_export.ls.oid (4kb) downloaded 113 time(s).
Esben.D
#6Esben.D Member Administration Original PosterPosts: 2,037  
posted: 4/24/2019 10:22:58 AM(UTC)
Awesome, thanks for sharing guys!

Active Discussions

Lansweeper Device Duplicates
by  Ian.Prentice   Go to last post Go to first unread
Last post: 7/23/2021 11:33:00 AM(UTC)
Lansweeper Anti-Virus on Mac
by  Ian.Prentice  
Go to last post Go to first unread
Last post: 7/23/2021 9:04:13 AM(UTC)
Lansweeper Computers Listed as Users
by  td1020   Go to last post Go to first unread
Last post: 7/22/2021 5:16:19 PM(UTC)
Lansweeper Can not see second server in error
by  Jürgen  
Go to last post Go to first unread
Last post: 7/22/2021 3:47:19 PM(UTC)
Lansweeper OU missing
by  Fred   Go to last post Go to first unread
Last post: 7/22/2021 2:08:05 PM(UTC)
Lansweeper Certificate status & end dates
by  VysJamesk  
Go to last post Go to first unread
Last post: 7/22/2021 1:07:02 PM(UTC)
Lansweeper NIST 800-171 Compliance
by  rader  
Go to last post Go to first unread
Last post: 7/20/2021 10:13:17 PM(UTC)