Notification

Icon
Error

Palo Alto Firewalls

Posted: Wednesday, April 3, 2019 2:17:01 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,565
5
Like
Hey everyone,

Below you can find a custom OID file for import into Lansweeper to monitor some vital information on your Palo Alto firewalls.

To get started simply do the following:

Verify that your Lansweeper is on version 7.1 or higher. If needed you can update here.
  • Download the OID file below.
  • Import the OID file.
  • Make sure to verify the target is correct, I created a new dynamic group with all Palo Alto devices.
  • Rescan your Palo Alto devices.
Palo Alto OIDs Download OID Import File
Type Dynamic Asset Group
TargetUndefined
ManufacturerUndefined
ModelUndefined
Mapped SNMP data
Label CPU util on management plane
OID 1.3.6.1.2.1.25.3.3.1.2.1
Label Utilization of CPUs on dataplane that are used for system functions
OID 1.3.6.1.2.1.25.3.3.1.2.2
Label Management plane memory and dataplane packet buffer
OID 1.3.6.1.2.1.25.2.3
Label % session utilization
OID 1.3.6.1.4.1.25461.2.1.2.3.1.0
Label GlobalProtect gateway % utilization
OID 1.3.6.1.4.1.25461.2.1.2.5.1.1
Label VSYS session % utilization
OID 1.3.6.1.4.1.25461.2.1.2.3.9.1.3.1
Label Active TCP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.4.0
Label Active UDP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.5.0
Label Active ICMP Sessions
OID 1.3.6.1.4.1.25461.2.1.2.3.6.0
JacobH
#1JacobH Member Posts: 142  
posted: 4/3/2019 2:42:25 PM(UTC)
Thank you for this!
JTempleton
#2JTempleton Member Posts: 38  
posted: 4/5/2019 8:11:57 PM(UTC)
Here is another OID you can use for the Palo Alto:

GlobalProtect gateway active tunnels: 1.3.6.1.4.1.25461.2.1.2.5.1.3.0
Dov
#3Dov Member Posts: 37  
posted: 4/8/2019 7:22:38 PM(UTC)
Ever since custom OID scanning became available I've been trying to have Lansweeper pull the PANOS version from the firewalls, with no luck, Lansweeper shows 'No data found'.
The OID is 1.3.6.1.4.1.25461.2.1.2.1.1, doing a MIB walk confirms it.
Has anyone else tried the same OID with better results?
Cheers,
Dov

JTempleton
#4JTempleton Member Posts: 38  
posted: 4/9/2019 3:02:52 PM(UTC)
Originally Posted by: Dov Go to Quoted Post
Ever since custom OID scanning became available I've been trying to have Lansweeper pull the PANOS version from the firewalls, with no luck, Lansweeper shows 'No data found'.
The OID is 1.3.6.1.4.1.25461.2.1.2.1.1, doing a MIB walk confirms it.
Has anyone else tried the same OID with better results?
Cheers,
Dov



Good day!

Change the OID to: 1.3.6.1.4.1.25461.2.1.2.1.1.0
studerje
#5studerje Member Posts: 6  
posted: 4/23/2019 9:33:38 PM(UTC)
Very helpful.
on ours, i also added
System Uptime OID 1.3.6.1.2.1.25.1.1.0
GlobalProtect client package version: 1.3.6.1.4.1.25461.2.1.2.1.15.0
HA State: 1.3.6.1.4.1.25461.2.1.2.1.11.0
HA Peer State: 1.3.6.1.4.1.25461.2.1.2.1.12.0
System Software Version: 1.3.6.1.4.1.25461.2.1.2.1.1.0

If I did it correctly, I've added my exported oid file.
Handles attachments
Palo_Alto_Firewall_oidtargets_export.ls.oid (4kb) downloaded 0 time(s).
Esben.D
#6Esben.D Member Administration Original PosterPosts: 1,565  
posted: 4/24/2019 10:22:58 AM(UTC)
Awesome, thanks for sharing guys!

Active Discussions

Lansweeper Performance scanning - incorrect values
by  Richard_Lan   Go to last post Go to first unread
Last post: Today at 4:26:02 PM(UTC)
Lansweeper Windows firewall rules
by  pryan67  
Go to last post Go to first unread
Last post: Today at 2:56:52 PM(UTC)
Lansweeper Run outside of our domain?
by  pryan67   Go to last post Go to first unread
Last post: Today at 2:53:05 PM(UTC)
Lansweeper Add logic to certain ticket submission
by  Esben.D  
Go to last post Go to first unread
Last post: Today at 1:02:46 PM(UTC)
Lansweeper Avast scanning still failing
by  Esben.D   Go to last post Go to first unread
Last post: Today at 12:59:17 PM(UTC)
Lansweeper History deleting daily
by  Esben.D  
Go to last post Go to first unread
Last post: Today at 12:46:08 PM(UTC)
Lansweeper Initial Ticket State Status
by  John M   Go to last post Go to first unread
Last post: Yesterday at 5:37:30 PM(UTC)
Lansweeper Import Assets with Documents
by  CyberCitizen  
Go to last post Go to first unread
Last post: Yesterday at 5:53:10 AM(UTC)