Cacti (home)ForumsDocumentation
Cacti: offical forums and support
It is currently Fri Dec 15, 2017 8:36 pm

All times are UTC - 5 hours




Post new topic Reply to topic  [ 24 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Thu Mar 20, 2014 6:20 am 
Offline

Joined: Thu Mar 20, 2014 6:02 am
Posts: 1
Thank you!

I've used preki template ( cacti_host_template_pan_fw.xml [167.28 KiB] ) monitoring PA-3050. Cacti installed on debian 6 squeeze from the repositories (Version 0.8.7g).

I modified in the "graph templates" section the CF type from LAST -> AVERAGE in the summary rows:
Item # 1 (pan_temp_cpu): CPU LINE1 AVERAGE
Item # 5 (pan_temp_dimm): DIMM LINE1 AVERAGE
.....

This avoid the CF type error:
ERROR: the RRD does not contain an RRA matching the chosen CF
:wink:


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Tue Mar 25, 2014 7:31 pm 
Offline

Joined: Tue Mar 25, 2014 7:28 pm
Posts: 1
Awesome work, glad to have these templates!

shoelessfarmer's template worked right out of the box for my 2050. Many thanks shoeless!

I do prefer preki's graph template but for some reason the graph templates do not build despite the data sources working just fine.. any suggestions?


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Thu May 29, 2014 4:10 pm 
Offline
Cacti User

Joined: Fri May 25, 2007 1:18 pm
Posts: 89
hi everyone,

I'm trying to use preki's template for a PAN-3020 , I'm not getting any of the PAN-specific info (i.e. CPU/TEMP/Sessions) to be graphed.
can anyone help on how to debug this?

manual snmpget successfully returns a value to me for given OIDs...


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Thu May 29, 2014 6:00 pm 
Offline
Cacti User

Joined: Fri May 25, 2007 1:18 pm
Posts: 89
nvm I got it..wasn't able to see that RRD error due to compatibility issue with graphviz-php... once that was remvoed, I was able to use graph management and enable debug mode..
saw the error, changed the graph templates for temp and session to use AVERAGE instead of LAST as posted earlier..all good now :)


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Mon Oct 27, 2014 2:41 pm 
Offline

Joined: Tue May 06, 2014 2:59 pm
Posts: 3
Hello Palo Alto users.

If you want to monitor whatever you want on a Palo Alto Firewall like this:

Global Counters from categories
Attachment:
File comment: Global Counters - custom categories
cacti_pa_xml_api_graph_example1.png
cacti_pa_xml_api_graph_example1.png [ 78.09 KiB | Viewed 2581 times ]


OR other global counters from aspects
Attachment:
File comment: Global Counters - custom aspects
cacti_pa_xml_api_graph_example2.png
cacti_pa_xml_api_graph_example2.png [ 66.89 KiB | Viewed 2581 times ]


Or vlan interfaces! That you cannot do with snmp on Palo Alto (till SW Version 6)
Attachment:
File comment: interface counters
cacti_pa_xml_api_graph_example3.png
cacti_pa_xml_api_graph_example3.png [ 36.59 KiB | Viewed 2581 times ]


Just mail me or read on itsecworks.com

Best Regards,
Akos


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Fri Dec 30, 2016 9:51 am 
Offline

Joined: Wed May 28, 2008 5:20 am
Posts: 44
For whoever is interested: I created a Cacti temple which uses the XML API to monitor a PaloAlto device.
I attached some examples, the host template and the perl script used by this template


Attachments:
PA_ARP.png
PA_ARP.png [ 25.7 KiB | Viewed 1001 times ]
PA_UserID.png
PA_UserID.png [ 30.35 KiB | Viewed 1001 times ]
PA_Throughput.png
PA_Throughput.png [ 30.17 KiB | Viewed 1001 times ]
PA_Sessions.png
PA_Sessions.png [ 31.21 KiB | Viewed 1001 times ]
PaloAlto XML API.zip [22.1 KiB]
Downloaded 195 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Thu Jan 05, 2017 7:50 am 
Offline

Joined: Tue Jul 15, 2014 3:39 am
Posts: 34
AkosBeginner1 wrote:
Hello Palo Alto users.

If you want to monitor whatever you want on a Palo Alto Firewall like this:

Global Counters from categories
Attachment:
cacti_pa_xml_api_graph_example1.png


OR other global counters from aspects
Attachment:
cacti_pa_xml_api_graph_example2.png


Or vlan interfaces! That you cannot do with snmp on Palo Alto (till SW Version 6)
Attachment:
cacti_pa_xml_api_graph_example3.png


Just mail me or read on itsecworks.com

Best Regards,
Akos


Hi AkosBeginner1
Is there anyway you could share your templates please. These look just what i am after.

Best Regards


Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Mon Jun 19, 2017 9:23 pm 
Offline

Joined: Mon Apr 13, 2015 5:53 pm
Posts: 44
Since released back in 2012 some of these templates no longer work as Palo Alto has modified their OID's over the years. Attached is the PA-500 v1.1 template.


Attachments:
cacti_host_template_palo_alto_firewalls_-_pa-500_v1-1.xml [277.35 KiB]
Downloaded 154 times
Top
 Profile  
 
 Post subject: Re: Palo Alto Firewall Template V0.01
PostPosted: Tue Aug 29, 2017 9:32 am 
Offline

Joined: Tue Aug 29, 2017 9:26 am
Posts: 1
Eol wrote:
Since released back in 2012 some of these templates no longer work as Palo Alto has modified their OID's over the years. Attached is the PA-500 v1.1 template.

Could you please share the template for cacti 0.8.8a ?

Thank you.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 24 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours


Who is online

Users browsing this forum: Bing [Bot] and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group