Notification

Icon
Error

Palo Alto Firewalls

Posted: Wednesday, April 3, 2019 2:17:01 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,768
5
Like
Hey everyone,

Below you can find a custom OID file for import into Lansweeper to monitor some vital information on your Palo Alto firewalls.

To get started simply do the following:

Verify that your Lansweeper is on version 7.1 or higher. If needed you can update here.
  • Download the OID file below.
  • Import the OID file.
  • Make sure to verify the target is correct, I created a new dynamic group with all Palo Alto devices.
  • Rescan your Palo Alto devices.
Palo Alto OIDs Download OID Import File
Type Dynamic Asset Group
TargetUndefined
ManufacturerUndefined
ModelUndefined
Mapped SNMP data
Label CPU util on management plane
OID 1.3.6.1.2.1.25.3.3.1.2.1
Label Utilization of CPUs on dataplane that are used for system functions
OID 1.3.6.1.2.1.25.3.3.1.2.2
Label Management plane memory and dataplane packet buffer
OID 1.3.6.1.2.1.25.2.3
Label % session utilization
OID 1.3.6.1.4.1.25461.2.1.2.3.1.0
Label GlobalProtect gateway % utilization
OID 1.3.6.1.4.1.25461.2.1.2.5.1.1
Label VSYS session % utilization
OID 1.3.6.1.4.1.25461.2.1.2.3.9.1.3.1
Label Active TCP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.4.0
Label Active UDP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.5.0
Label Active ICMP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.6.0
JacobH
#1JacobH Member Posts: 165  
posted: 4/3/2019 2:42:25 PM(UTC)
Thank you for this!
JTempleton
#2JTempleton Member Posts: 40  
posted: 4/5/2019 8:11:57 PM(UTC)
Here is another OID you can use for the Palo Alto:

GlobalProtect gateway active tunnels: 1.3.6.1.4.1.25461.2.1.2.5.1.3.0
Dov
#3Dov Member Posts: 37  
posted: 4/8/2019 7:22:38 PM(UTC)
Ever since custom OID scanning became available I've been trying to have Lansweeper pull the PANOS version from the firewalls, with no luck, Lansweeper shows 'No data found'.
The OID is 1.3.6.1.4.1.25461.2.1.2.1.1, doing a MIB walk confirms it.
Has anyone else tried the same OID with better results?
Cheers,
Dov

JTempleton
#4JTempleton Member Posts: 40  
posted: 4/9/2019 3:02:52 PM(UTC)
Originally Posted by: Dov Go to Quoted Post
Ever since custom OID scanning became available I've been trying to have Lansweeper pull the PANOS version from the firewalls, with no luck, Lansweeper shows 'No data found'.
The OID is 1.3.6.1.4.1.25461.2.1.2.1.1, doing a MIB walk confirms it.
Has anyone else tried the same OID with better results?
Cheers,
Dov



Good day!

Change the OID to: 1.3.6.1.4.1.25461.2.1.2.1.1.0
studerje
#5studerje Member Posts: 7  
posted: 4/23/2019 9:33:38 PM(UTC)
Very helpful.
on ours, i also added
System Uptime OID 1.3.6.1.2.1.25.1.1.0
GlobalProtect client package version: 1.3.6.1.4.1.25461.2.1.2.1.15.0
HA State: 1.3.6.1.4.1.25461.2.1.2.1.11.0
HA Peer State: 1.3.6.1.4.1.25461.2.1.2.1.12.0
System Software Version: 1.3.6.1.4.1.25461.2.1.2.1.1.0

If I did it correctly, I've added my exported oid file.
Handles attachments
Palo_Alto_Firewall_oidtargets_export.ls.oid (4kb) downloaded 16 time(s).
Esben.D
#6Esben.D Member Administration Original PosterPosts: 1,768  
posted: 4/24/2019 10:22:58 AM(UTC)
Awesome, thanks for sharing guys!

Active Discussions

Lansweeper how to add windows and office licenses manually.
by  cesar.ti   Go to last post Go to first unread
Last post: 8/23/2019 7:32:10 PM(UTC)
Lansweeper User roles and permissions
by  RKCar  
Go to last post Go to first unread
Last post: 8/23/2019 6:23:38 PM(UTC)
Lansweeper Deployment condition
by  RKCar   Go to last post Go to first unread
Last post: 8/23/2019 4:07:30 PM(UTC)
Lansweeper HP Printer not showing correctly
by  JacobH  
Go to last post Go to first unread
Last post: 8/23/2019 1:32:54 PM(UTC)
Lansweeper Moving Assets in Location not Saving
by  brodiemac   Go to last post Go to first unread
Last post: 8/23/2019 12:23:04 PM(UTC)
Lansweeper Scanning includes IOS devices even though I exclude them??
by  steveb  
Go to last post Go to first unread
Last post: 8/22/2019 11:05:33 PM(UTC)
Lansweeper lsagent not scanning/sending when using relay
by  Esben.D   Go to last post Go to first unread
Last post: 8/19/2019 12:31:02 PM(UTC)
Lansweeper Check if Netbios is disabled over TCP/IP
by  TaherMD  
Go to last post Go to first unread
Last post: 8/19/2019 6:00:51 AM(UTC)