Fortinet-Fortigate-FW-Statistics

Description

Template to monitor Fortinet Fortigate Firewall Anti-virus statistics, IPS/IDS statistics and Web-filter statistics for a particular virtual domain. This template is created on FORTINET-FORTIGATE-MIB OIDs and validated on FGT_301E [SysObjId: 1.3.6.1.4.1.12356.101.1.3008].

Prerequisites

SNMP should be enabled in end device and device should support FORTINET-FORTIGATE-MIB and SNMP credentials should be attached against the device in portal.

Metric Parameters

Metric Parameters
Parameter	Description
Frequency	Frequency is the interval in which you want to probe and collect metric data from the target device/resource Frequency is defined in minutes (min).
Warning Threshold	If the metric value satisfies the condition defined along with Warning Threshold value, then a notification is sent to the user.
Critical Threshold	If the metric value satisfies the condition defined along with Critical Threshold value, then a notification is sent to the user.
Alert	The alert value can be set to either Yes or No. If it is Yes, then an alert message is sent to the user.

Metrics

fortinet.webfilter.http.sessions.blocked

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.10.1.2.1.1.1
Expression	NULL
Description	Provides the Fortinet Fortigate number of HTTP sessions blocked by Web-filter since start-up. [OID : 1.3.6.1.4.1.12356.101.10.1.2.1.1.1 ]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Webfilter Stats - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	25	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	50	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.webfilter.https.sessions.blocked

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.10.1.2.1.1.2
Expression	NULL
Description	Provides the Fortinet Fortigate number of HTTPS sessions blocked by Web-filter since start-up. [OID : 1.3.6.1.4.1.12356.101.10.1.2.1.1.2 ]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Webfilter Stats - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	25	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	50	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.webfilter.http.urls.blocked

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.10.1.2.1.1.3
Expression	NULL
Description	Provides the Fortinet Fortigate number of HTTP URLS blocked by Web-filter since start-up. [OID : 1.3.6.1.4.1.12356.101.10.1.2.1.1.3 ]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Webfilter Stats - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	25	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	50	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.webfilter.https.urls.blocked

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.10.1.2.1.1.4
Expression	NULL
Description	Provides the Fortinet Fortigate number of HTTPS URLS blocked by Web-filter since start-up. [OID : 1.3.6.1.4.1.12356.101.10.1.2.1.1.4 ]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Webfilter Stats - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	25	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	50	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.fortigate.virus.detected

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.8.2.1.1.1
Expression	NULL
Description	Provides the Fortinet Fortigate number of virus transmissions detected in the virtual domain since start-up. [OID : 1.3.6.1.4.1.12356.101.8.2.1.1.1]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Virus - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	50	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	100	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.fortigate.virus.blocked

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.8.2.1.1.2
Expression	NULL
Description	Provides the Fortinet Fortigate umber of virus transmissions blocked in the virtual domain since start-up [OID: 1.3.6.1.4.1.12356.101.8.2.1.1.2 ].
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Virus - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	50	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	100	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.fortigate.intrusion.detected

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.9.2.1.1.1
Expression	NULL
Description	Provides the Fortinet Fortigate number of intrusions detected since start-up in this virtual domain [OID: 1.3.6.1.4.1.12356.101.9.2.1.1.1, 1.3.6.1.4.1.12356.101.9.2.1.1.2]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Intrusion - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	100	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	200	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph

fortinet.fortigate.intrusions.blocked

Metric Details

Metric Details
Applicable for	Device
SNMP OID	1.3.6.1.4.1.12356.101.9.2.1.1.2
Expression	NULL
Description	Number of intrusions blocked since start-up in this virtual domain. [OID : 1.3.6.1.4.1.12356.101.9.2.1.1.2 ]
Category	SNMP monitors
Collector Type	Gateway
Monitor Name	Fortinet Fortigate Intrusion - With Component VD Name
Unit

Possible Inputs

Possible Inputs
Metric	Input Value	Range of Values
Frequency	5	1 – 1440 (mins)
Filter	NULL	Not Applicable
Warning Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Warning Threshold	100	0 - 4294967295
Warning Repeat Count	3	1-12
Critical Operator	GREATER_THAN_EQUAL	Ends with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
Critical Threshold	200	0 - 4294967295
Critical Repeat Count	3	1-12
Alert	Yes	Yes/No
Graph (Yes/No)	Yes	Yes/No

Sample Output

No graph