Alto MS Series User Manual download pdf (Page 33)

Getting Started Guide 29

Integrate the Firewall into Your Management Network Monitor the Firewall

Monitor the Firewall Using SNMP

All Palo Alto Networks firewalls support standard networking SNMP management information base (MIB)

modules as well as proprietary Enterprise MIB modules. You can configure an SNMP manager to get statistics

from the firewall. For example, you could configure your SNMP manager to monitor the interfaces, active

sessions, concurrent sessions, session utilization percentage, temperature, and/or system uptime on the firewall.

Palo Alto Networks firewalls support SNMP GET requests only; SNMP SET requests are not

supported.

Set Up SNMP Monitoring

Step 1 Enable the interface to allow inbound

SNMP requests.

• If you will be receiving SNMP GET messages on the MGT

interface, select

Device > Setup > Management and click the Edit

icon in the Management Interface Settings section of the screen.

In the

Services section, select the SNMP check box and then click

OK.

• If you will be receiving SNMP GET messages on a different

interface, you must associate a management profile with the

interface and enable SNMP management.

Step 2 From the web interface on the firewall,

configure the settings to allow the SNMP

agent on the firewall to respond to

incoming GET requests from the SNMP

manager.

1. Select

Device > Setup > Operations > SNMP Setup.

2. Specify the

Physical Location of the firewall and the name or

email address of an administrative

Contact.

3. Select the SNMP

Version and then enter the configuration

details as follows (depending on which SNMP version you are

using) and then click

OK:

•

V2c—Enter the SNMP Community String that will allow the

SNMP manager access to the SNMP agent on the firewall.

The default value is

public, however because this is a

well-known community string, it is a best practice to use a

value that is not easily guessed.

•

V3—You must create at least one View and one User in order

to use SNMPv3. The view specifies which management

information the manager has access to. If you want to allow

access to all management information, just enter the top-level

OID of .1.3.6.1 and specify the Option as include (you can

also create views that exclude certain objects). Use

0xf0 as the

Mask. Then when you create a user, select the View you just

created and specify the

Auth Password and Priv Password.

The authentication settings (the community string for V2c or

the username and passwords for V3) configured on the firewall

must match the value configured on the SNMP manager.

4. Click

OK to save the settings.

5. Click

Commit to save the SNMP settings.

1 2 ... 28 29 30 31 32 33 34 35 36 37 38 ... 107 108

Comments to this Manuals

No comments

Alto MS Series User Manual Page 33

Comments to this Manuals