Description

Template to monitor Palo Alto M-100 appliance. It monitors the parameters like the number of Active Sessions (TCP, UDP and ICMP), Session Utilization Percentage, Maximum Sessions, Fan and Temperature Status, Log Collector Log Rate and Log Collector Disk Usage, vSys Session Utilization, Global Protect Gateway Active Tunnels, GlobalProtect Gateway utilization percentage, Panorama connection status and SSL proxy Session utilization percentage.

Prerequisites

SNMP should be enabled in end device and device should support PAN-COMMON-MIB, ENTITY-SENSOR-MIB and SNMP credentials should be attached against the device in portal.

How to Apply: This template is All instance selection based. It will not ask user to select any instance(s) while assigning it to a device.

Metric Parameters

Metric Parameters
ParameterDescription
Frequency
  • Frequency is the interval in which you want to probe and collect metric data from the target device/resource
  • Frequency is defined in minutes (min).
    • Warning ThresholdIf the metric value satisfies the condition defined along with Warning Threshold value, then a notification is sent to the user.
    Critical ThresholdIf the metric value satisfies the condition defined along with Critical Threshold value, then a notification is sent to the user.
    AlertThe alert value can be set to either Yes or No. If it is Yes, then an alert message is sent to the user.

    Metrics

    paloalto.global.protect.gateway.active.tunnels

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.5.1.3.0
    ExpressionNULL
    DescriptionProvides the number of active tunnels. [OID: 1.3.6.1.4.1.25461.2.1.2.5.1.3]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Global Protect Gateway Active tunnels
    UnitNone

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Global Protect Gateway Active Tunnels

    Global Protect Gateway Active Tunnels

    paloalto.connection.status.to.panorama.server

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.4.1.0
    ExpressionNULL
    DescriptionProvides the current connection status to Panorama Server. Possible status values are connected and not-connected. [OID: 1.3.6.1.4.1.25461.2.1.2.4.1.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Panorama Server Connection Status
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical OperatorEQUALS_IGNORE_CASEEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Thresholdnot-Connected0..255
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)NoYes/No

    Sample Output

    Connection Status to Panorama Server

    Connection Status to Panorama Server

    paloalto.connection.status.to.panorama2.server

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.4.2.0
    ExpressionNULL
    DescriptionProvides the current connection status to Panorama 2 Server. Possible status values are connected and not-connected. [OID: 1.3.6.1.4.1.25461.2.1.2.4.2.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Panorama Server Connection Status
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)NoYes/No

    Sample Output

    Connection Status to Panorama2 Server

    Connection Status to Panorama2 Server

    paloalto.session.utilization

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.1.0
    ExpressionNULL
    DescriptionProvides the session table utilization percentage. Values should be between 0 and 100.
    [OID: 1.3.6.1.4.1.25461.2.1.2.3.1]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit%

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold800-100
    Warning Repeat Count21-12
    Critical OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold900-100
    Critical Repeat Count21-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Session Utilization

    Session Utilization

    paloalto.session.active.tcp

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.4.0
    ExpressionNULL
    DescriptionTotal number of active TCP sessions. [OID: 1.3.6.1.4.1.25461.2.1.2.3.4.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Active TCP Sessions

    Active TCP Sessions

    paloalto.session.active.udp

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.5.0
    ExpressionNULL
    DescriptionTotal number of active UDP sessions. [OID: 1.3.6.1.4.1.25461.2.1.2.3.5.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Active UDP Sessions

    Active UDP Sessions

    paloalto.session.active.icmp

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.6.0
    ExpressionNULL
    DescriptionTotal number of active ICMP sessions. [OID: 1.3.6.1.4.1.25461.2.1.2.3.6.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Active ICMP Sessions

    Active ICMP Sessions

    paloalto.session.active

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.3.0
    ExpressionNULL
    DescriptionTotal number of active sessions (including tcp, udp and icmp sessions). [OID: 1.3.6.1.4.1.25461.2.1.2.3.3.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Active Sessions

    Active Sessions

    paloalto.ssl.proxy.utilization

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.8.0,
    1.3.6.1.4.1.25461.2.1.2.3.7.0
    ExpressionpanSessionSsslProxyUtilization
    DescriptionProvides the SSL proxy Session utilization percentage. Values should be between 0 and 100.
    [OID: 1.3.6.1.4.1.25461.2.1.2.3.8]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit%

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold800-100
    Warning Repeat Count21-12
    Critical OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold900-100
    Critical Repeat Count21-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    SSL Proxy Utilization

    SSL Proxy Utilization

    paloalto.session.max

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.3.2.0
    ExpressionNULL
    DescriptionTotal number of sessions supported. [1.3.6.1.4.1.25461.2.1.2.3.2.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Session Utilization
    Unit

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Max Supported Sessions

    Max Supported Sessions

    paloalto.vsys.session.utilization

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID
    1.3.6.1.4.1.25461.2.1.2.3.9.1.3, 1.3.6.1.4.1.25461.2.1.2.3.9.1.4
    ExpressionpanVsysSessionUtilizationPct
    DescriptionVsys utilization percentage, if session limit is configured. If session limit is not configured, this value is '0'
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Vsys Session Utilization
    Unit%

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    FilterNULLNot Applicable
    Warning OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold800-100
    Warning Repeat Count21-12
    Critical OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold900-100
    Critical Repeat Count21-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Vsys Session Utilization

    Vsys Session Utilization

    paloalto.global.protect.gateway.utilization

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.5.1.1.0
    ExpressionNULL
    DescriptionGlobalProtect Gateway utilization percentage
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Global Protect Gateway Utilization
    Unit%

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Warning Threshold800-100
    Warning Repeat Count11-12
    Critical OperatorGREATER_THAN_EQUALEnds with, ==, !=, >=, <=, >, <, In Range, Out of range, Equals, Not equals, Equals Ignore Case, Not Equals Ignore Case, Contains, Not contains, Regex match, Regex no match, In string list, Not in string list, In List, Not in list, Starts with
    Critical Threshold900-100
    Critical Repeat Count11-12
    AlertYesYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Global Protect Gateway Utilization

    Global Protect Gateway Utilization

    paloalto.lc.disk.usage

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.6.1.3.1.2
    ExpressionNULL
    DescriptionThe Log disk usage on the Log Collector. [OID: 1.3.6.1.4.1.25461.2.1.2.6.1.3.1.2]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Log Collector Disk Usage
    UnitMB

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    FilterNULLNot Applicable
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    Log Collector Disk Usage

    Log Collector Disk Usage

    paloalto.lc.log.rate

    Metric Details

    Metric Details
    Applicable forDevice
    SNMP OID1.3.6.1.4.1.25461.2.1.2.6.1.1.0
    ExpressionNULL
    DescriptionRepresents the write rate in logs/s on the Log Collection. [OID: 1.3.6.1.4.1.25461.2.1.2.6.1.1.0]
    CategorySNMP monitors
    Collector TypeGateway
    Monitor NamePA-FW - Log Collector Log Rate
    Unitpsec

    Possible Inputs

    Possible Inputs
    MetricInput ValueRange of Values
    Frequency151 – 1440 (mins)
    Filter
    Warning Operator
    Warning Threshold
    Warning Repeat Count
    Critical Operator
    Critical Threshold
    Critical Repeat Count
    AlertNoYes/No
    Graph (Yes/No)YesYes/No

    Sample Output

    No graph

    Note: Few metrics (panGPGatewayUtilization, panGPGWUtilizationActiveTunnels, panVsysSessionUtilizationPct) only work in PAN OS 6.0.

    https://live.paloaltonetworks.com/t5/tkb/articleprintpage/tkb-id/Management-TKB/article-id/1596