Cacti (home)ForumsRepositoryDocumentation
Cacti: offical forums and support
It is currently Tue Sep 30, 2014 8:48 am

All times are UTC - 5 hours




Post new topic Reply to topic  [ 19 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Palo Alto Firewall Template V0.01
PostPosted: Fri Sep 30, 2011 8:49 pm 
Offline

Joined: Thu Jun 02, 2011 1:29 pm
Posts: 5
So why not make my first post to the community a template?? Been a lurker around here for the past couple of months - so much great information and so many smart people it's amazing.

I found out about Cacti a few months ago and finally decided it was time to start playing with it even though I'm in an Enterprise environment and we have "Enterprise" monitoring tools that aren't open source and you obviously don't have the flexibility in doing what you want as you do here.

Anyway - this is my first run at Palo Alto Firewalls - it's only providing session table stats (% utilized, TCP, UDP, Total). Suggestions/feedback appreciated - if anyone would like more data included in the template I will maintain and update it as my contribution.

Thanks!

V02 added 04/19/2012 - Includes MP/DP CPU.
V03 combined session graphs and fixed V02 issues.

Attachment:
palo_alto.jpg
palo_alto.jpg [ 62.24 KiB | Viewed 7413 times ]


Attachments:
paloalto_firewalls_v03.xml [183.6 KiB]
Downloaded 965 times
cacti_host_template_paloalto_firewalls_v001.xml [38.16 KiB]
Downloaded 953 times


Last edited by mr007619 on Mon Apr 23, 2012 5:37 pm, edited 2 times in total.
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Sun Oct 09, 2011 5:01 am 
Offline

Joined: Sun Oct 09, 2011 4:51 am
Posts: 1
Hi. Thanks for the PAN template.

I've got a request (since you kindly offered :D ) - Is there a way to watch QoS stats through SNMP OIDs and graph them through your template?

Thanks again.

A


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Wed Nov 30, 2011 4:41 pm 
Offline

Joined: Mon Feb 04, 2008 9:16 am
Posts: 35
Was just about to start working on my own template when I stumbled upon yours. I just installed and wanted to say thanks for sharing. I'll let you know if I have any problems, or can extend it in anyway.

Cheers,
joey


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Mon Dec 05, 2011 4:28 pm 
Offline

Joined: Thu Jun 02, 2011 1:29 pm
Posts: 5
ashi wrote:
Hi. Thanks for the PAN template.

I've got a request (since you kindly offered :D ) - Is there a way to watch QoS stats through SNMP OIDs and graph them through your template?

Thanks again.

A


Ashi,

PAN's MIB is pretty limited - I don't see any way to graph QoS stats via a query. You'd probably have to write a script to login and grab that data since it doesn't seem to be available via SNMP.


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Wed Dec 21, 2011 5:36 am 
Offline

Joined: Mon Aug 08, 2011 7:09 am
Posts: 3
Hi all.

You can also try my Palo Alto FW template for sessions and temperatures.

Regards,

Preki


Attachments:
cacti_host_template_palo_alto_fw.xml [155.42 KiB]
Downloaded 571 times
cacti_host_template_palo_alto_fw.PNG
cacti_host_template_palo_alto_fw.PNG [ 113.03 KiB | Viewed 8171 times ]
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Mon Jan 09, 2012 7:10 pm 
Offline

Joined: Mon Jan 09, 2012 7:01 pm
Posts: 2
Hi guys. I have tried to import these into Cacti but receive a XML hash error. Has anyone else experienced this?


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Tue Jan 10, 2012 8:59 am 
Offline

Joined: Mon Aug 08, 2011 7:09 am
Posts: 3
samu5ka wrote:
Hi guys. I have tried to import these into Cacti but receive a XML hash error. Has anyone else experienced this?

My Cacti is 0.8.7g, maybe you have differnet version ?


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Wed Jan 11, 2012 4:50 pm 
Offline

Joined: Mon Jan 09, 2012 7:01 pm
Posts: 2
Ok. I am on 0.8.7e still so will upgrade and try again. Thanks.


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Fri Jan 13, 2012 3:19 pm 
Offline
User avatar

Joined: Fri Jan 13, 2012 3:06 pm
Posts: 1
Attached are graph & data templates for the PA CPU's. We have a PA5020. I'm not sure if the OID's are different for each model. PANOS 4.1.1, Cacti 0.8.7

Note: The temperature graphs for the v0.01 template are way off, I suspect I have a different model than the OP's.


Attachments:
cacti_PAN_CPU.zip [6.44 KiB]
Downloaded 391 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Tue Jan 31, 2012 6:15 am 
Offline

Joined: Mon Aug 08, 2011 7:09 am
Posts: 3
Hi !

I have some modifications on my template, based on PA-4020 & 4060 models.

Have fun :D


Attachments:
cacti_host_template_palo_alto_fw.PNG
cacti_host_template_palo_alto_fw.PNG [ 110.95 KiB | Viewed 7904 times ]
cacti_host_template_pan_fw.xml [167.28 KiB]
Downloaded 482 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Tue Mar 20, 2012 7:10 pm 
Offline

Joined: Sun Mar 21, 2010 6:35 pm
Posts: 11
Here are a few other templates I created which may be of interest.

I created a few Cacti Templates which allow you to quickly and easily monitor Palo Alto Networks firewalls with SNMP. There are 5 different templates corresponding to the 5 different Firewall families, PA-200, PA-500, PA-20xx, PA-40xx, PA-50xx.

Using these with Cacti (http://www.cacti.net), these Host templates will monitor the following sets variables, create historical graphs of these variables (example Graphs will be added to a followup post):

Traffic the firewall is passing through each selected interface(s)
The number of Active Sessions (TCP, UDP and ICMP)
The number of Concurrent Sessions (aggregate of Active Sessions)
Session Utilization Percentage – Based on the PAN Firewall Model
Temperature of the Firewall
Uptime of the Firewall

If you know of other OIDs which you feel the broader community would like monitored, I would be happy to add them to the templates.



Hope these help,
Shoelessfarmer


Attachments:
cacti_host_template_palo_alto_firewalls_-_pa-500.xml [209.75 KiB]
Downloaded 461 times
cacti_host_template_palo_alto_firewalls_-_pa-200.xml [209.75 KiB]
Downloaded 313 times
cacti_host_template_palo_alto_firewalls_-_pa-50xx.xml [209.76 KiB]
Downloaded 706 times
cacti_host_template_palo_alto_firewalls_-_pa-40xx.xml [209.76 KiB]
Downloaded 289 times
cacti_host_template_palo_alto_firewalls_-_pa-20xx.xml [209.76 KiB]
Downloaded 652 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Tue Mar 20, 2012 7:12 pm 
Offline

Joined: Sun Mar 21, 2010 6:35 pm
Posts: 11
Here are a few of the sample graphs for my templates:


Attachments:
DataPlane-Utilization.png
DataPlane-Utilization.png [ 24.03 KiB | Viewed 7627 times ]
Management-Utilization.png
Management-Utilization.png [ 31.44 KiB | Viewed 7627 times ]
Temperature.png
Temperature.png [ 20.11 KiB | Viewed 7627 times ]
Session-Utilization.png
Session-Utilization.png [ 21.96 KiB | Viewed 7627 times ]
Sessions.png
Sessions.png [ 38.5 KiB | Viewed 7627 times ]
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Thu Apr 19, 2012 12:30 pm 
Offline

Joined: Thu Jun 02, 2011 1:29 pm
Posts: 5
V0.02 attached, added MP/DP CPU. I still prefer the graphs separate so I'm keeping my template as is =). MP/DP is combined.


Attachments:
paloalto_firewalls_v02.xml [51.34 KiB]
Downloaded 223 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Fri Apr 20, 2012 6:14 pm 
Offline

Joined: Thu Jun 02, 2011 1:29 pm
Posts: 5
So I made a couple of mistakes with V0.02, fixed mistakes and I realized that separating the graphs isn't as cool as I thought. Combined TCP/UDP and concurrent sessions and MP/DP CPU issues fixed.


Attachment:
palo_alto.jpg
palo_alto.jpg [ 62.24 KiB | Viewed 7443 times ]


Attachments:
paloalto_firewalls_v03.xml [183.6 KiB]
Downloaded 701 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Thu May 03, 2012 6:07 am 
Offline

Joined: Mon Feb 12, 2007 11:55 am
Posts: 15
I tried to import your template for Palo Alto PA-5000 in to my Cacti 0.8.7b unfortunately I received the following error message:“Import error xml hash version does not exist”

A search on the forum reviews that I have to upgrade to the latest version of Cacti.

My plan is to upgrade to the latest version of Cacti but in the short term, is they any chance you can please export your template for my version on Cacti?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 19 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours


Who is online

Users browsing this forum: DariosLDKem and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group