├── pan-81-snmp-mib-modules.zip ├── screencapture-paloalto-grafana.png ├── README.md ├── 820.conf ├── 3020.conf ├── 5050.conf ├── 5250.conf ├── LICENSE └── PAN-COMMON-MIB.my /pan-81-snmp-mib-modules.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vbarahona/Panos2Grafana/HEAD/pan-81-snmp-mib-modules.zip -------------------------------------------------------------------------------- /screencapture-paloalto-grafana.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vbarahona/Panos2Grafana/HEAD/screencapture-paloalto-grafana.png -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Panos2Grafana 2 | Steps and configurations to create a complete PaloAlto Firewall dashboard in GRAFANA. The dashboard is compatible with a standalone firewall, with one HA cluster of 2 firewalls and with multiple clusters. 3 | 4 | At this time support for models: 5 | * PA-5250 6 | * PA-5050 7 | * PA-3020 8 | * PA-820 9 | 10 | If you are using a different one, probably some sensor graphs (cpu_temp and fan_speed) can be inadequate, but rest of the panels should be ok. 11 | 12 | # Screenshot 13 | 14 |

screenshot

15 | 16 | # Getting Started 17 | 18 | ## Prerequisites 19 | The infraestruture needed is: 20 | - PanOS 8.1 or greater firewall (obviously) ;-) 21 | - InfluxDB 22 | - Telegraf 23 | - Grafana 24 | 25 | Your PanOS Firewall must be configured to answer SNMP queries. Your TIG environment (Telegraf/InfluxDB/Grafana) also installed and configured property. I will not cover information about installation and basic configuration as a lot of step by step tutorials can be found. 26 | 27 | ## Telegraf 28 | 29 | Data will be collected by Telegraf SNMP plugin. Just download the appropriate configuration file for your model (5250.conf for PA5250 for example). 30 | 31 | Modify according with your enviroment: 32 | * agents: ip or hostname firewalls 33 | * community: snmp read comunity of your firewalls 34 | * cluster: tag_name for your cluster. If you have only one cluster (or one firewall) default value "cluster1" is ok. Otherwise look for "[inputs.snmp.tags]" and modify it. 35 | 36 | Copy the config file in /etc/telegraf/telegraf.d/ and reload telegraf 37 | ``` 38 | sudo systemctl restart telegraf 39 | ``` 40 | After some seconds, it's a good idea to check if everything is working 41 | ``` 42 | sudo systemctl status telegraf 43 | ``` 44 | You can config as many clusters as you needs. Each cluster needs a new config file with . Just creating a copy of the first one if hardware model is the same or repeat the proccess with other config file according to your hardware. 45 | 46 | ## Grafana 47 | Finally, import Dashboard number [11321](https://grafana.com/dashboards/11321) from [grafana.com](https://grafana.com/dashboards/11321) and the magic will happen. 48 | -------------------------------------------------------------------------------- /820.conf: -------------------------------------------------------------------------------- 1 | ### Tested with 820 but probably valid for 800 family 2 | 3 | ## snmp v2 config 4 | [[inputs.snmp]] 5 | agents = [ "fw1.domain.com","fw2.domain.com" ] 6 | version = 2 7 | community = "public" 8 | interval = "60s" 9 | 10 | ## snmp v3 config 11 | #[[inputs.snmp]] 12 | # agents = [ "fw1.domain.com","fw2.domain.com" ] 13 | # version = 3 14 | # sec_level = "authPriv" 15 | # sec_name = "name" 16 | # auth_protocol = "sha" 17 | # auth_password = "password" 18 | # priv_protocol = "aes" 19 | # priv_password = "password" 20 | # interval = "60s" 21 | 22 | # System 23 | name = "pan_system" 24 | [inputs.snmp.tags] 25 | cluster = "cluster1" 26 | [[inputs.snmp.field]] 27 | name = "hostname" 28 | oid = ".1.3.6.1.2.1.1.5.0" 29 | is_tag = true 30 | [[inputs.snmp.field]] 31 | name = "uptime" 32 | oid = ".1.3.6.1.2.1.1.3.0" 33 | [[inputs.snmp.field]] 34 | name = "panSysHAState" 35 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.11.0" 36 | #oid = "PAN-COMMON-MIB::panSysHAState" 37 | [[inputs.snmp.field]] 38 | name = "hrProcessorLoad.1" 39 | oid = ".1.3.6.1.2.1.25.3.3.1.2.1" 40 | [[inputs.snmp.field]] 41 | name = "hrProcessorLoad.2" 42 | oid = ".1.3.6.1.2.1.25.3.3.1.2.2" 43 | [[inputs.snmp.field]] 44 | name = "panSessionUtilization" 45 | oid = "iso.3.6.1.4.1.25461.2.1.2.3.1.0" 46 | #oid = "PAN-COMMON-MIB::panSessionUtilization.0" 47 | [[inputs.snmp.field]] 48 | name = "panSessionActiveTcp" 49 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.4.0" 50 | #oid = "PAN-COMMON-MIB::panSessionActiveTcp.0" 51 | [[inputs.snmp.field]] 52 | name = "panSessionActiveUdp" 53 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.5.0" 54 | #oid = "PAN-COMMON-MIB::panSessionActiveUdp.0" 55 | [[inputs.snmp.field]] 56 | name = "panSessionActiveICMP" 57 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.6.0" 58 | #oid = "PAN-COMMON-MIB::panSessionActiveICMP.0" 59 | [[inputs.snmp.field]] 60 | name = "panGPGWUtilizationActiveTunnels" 61 | oid = ".1.3.6.1.4.1.25461.2.1.2.5.1.3.0" 62 | #oid = "PAN-COMMON-MIB::panGPGWUtilizationActiveTunnels.0" 63 | 64 | # Hardware Sensors PA820 65 | [[inputs.snmp.field]] 66 | name = "fan1" 67 | oid = ".1.3.6.1.2.1.99.1.1.1.4.2" 68 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.2" 69 | [[inputs.snmp.field]] 70 | name = "fan2" 71 | oid = ".1.3.6.1.2.1.99.1.1.1.4.3" 72 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.3" 73 | [[inputs.snmp.field]] 74 | name = "fan3" 75 | oid = ".1.3.6.1.2.1.99.1.1.1.4.4" 76 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.4" 77 | [[inputs.snmp.field]] 78 | name = "cpu_temp1" 79 | oid = ".1.3.6.1.2.1.99.1.1.1.4.5" 80 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.5" 81 | [[inputs.snmp.field]] 82 | name = "cpu_temp2" 83 | oid = ".1.3.6.1.2.1.99.1.1.1.4.6" 84 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.6" 85 | [[inputs.snmp.field]] 86 | name = "cpu_temp3" 87 | oid = ".1.3.6.1.2.1.99.1.1.1.4.7" 88 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.7" 89 | [[inputs.snmp.field]] 90 | name = "cpu_temp4" 91 | oid = ".1.3.6.1.2.1.99.1.1.1.4.8" 92 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.8" 93 | [[inputs.snmp.field]] 94 | name = "cpu_temp5" 95 | oid = ".1.3.6.1.2.1.99.1.1.1.4.9" 96 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.9" 97 | 98 | # Global Counters 99 | [[inputs.snmp.table]] 100 | name = "pan_global_counters" 101 | inherit_tags = [ "hostname" ] 102 | [[inputs.snmp.table.field]] 103 | name = "panFlowIpfragFragErr" 104 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.1" 105 | #oid = "PAN-COMMON-MIB::panFlowIpfragFragErr" 106 | [[inputs.snmp.table.field]] 107 | name = "panFlowIpfragRecv" 108 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.2" 109 | #oid = "PAN-COMMON-MIB::panFlowIpfragRecv" 110 | [[inputs.snmp.table.field]] 111 | name = "panTcpAllocWqeFailed" 112 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.1" 113 | #oid = "PAN-COMMON-MIB::panTcpAllocWqeFailed" 114 | [[inputs.snmp.table.field]] 115 | name = "panTcpDeny" 116 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.2" 117 | #oid = "PAN-COMMON-MIB::panTcpDeny" 118 | [[inputs.snmp.table.field]] 119 | name = "panTcpDropOutOfWnd" 120 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.3" 121 | #oid = "PAN-COMMON-MIB::panTcpDropOutOfWnd" 122 | [[inputs.snmp.table.field]] 123 | name = "panTcpDropPacket" 124 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.4" 125 | #oid = "PAN-COMMON-MIB::panTcpDropPacket" 126 | [[inputs.snmp.table.field]] 127 | name = "panFlowActionClose" 128 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.5" 129 | #oid = "PAN-COMMON-MIB::panFlowActionClose" 130 | [[inputs.snmp.table.field]] 131 | name = "panFlowActionReset" 132 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.6" 133 | #oid = "PAN-COMMON-MIB::panFlowActionReset" 134 | [[inputs.snmp.table.field]] 135 | name = "panFlowTcpNonSyn" 136 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.7" 137 | #oid = "PAN-COMMON-MIB::panFlowTcpNonSyn" 138 | [[inputs.snmp.table.field]] 139 | name = "panTcpExceedSegLimit" 140 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.8" 141 | #oid = "PAN-COMMON-MIB::panTcpExceedSegLimit" 142 | [[inputs.snmp.table.field]] 143 | name = "panDfaSw" 144 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.2" 145 | #oid = "PAN-COMMON-MIB::panDfaSw" 146 | [[inputs.snmp.table.field]] 147 | name = "panFlowHostServiceAllow" 148 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.3" 149 | #oid = "PAN-COMMON-MIB::panFlowHostServiceAllow" 150 | [[inputs.snmp.table.field]] 151 | name = "panHaPathmonSent " 152 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.4" 153 | #oid = "PAN-COMMON-MIB::panHaPathmonSent" 154 | [[inputs.snmp.table.field]] 155 | name = "panAhoFpga" 156 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.5" 157 | #oid = "PAN-COMMON-MIB::panAhoFpga" 158 | [[inputs.snmp.table.field]] 159 | name = "panDfaFpga" 160 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.6" 161 | #oid = "PAN-COMMON-MIB::panDfaFpga" 162 | [[inputs.snmp.table.field]] 163 | name = "panFpgaPkt " 164 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.7" 165 | #oid = "PAN-COMMON-MIB::panFpgaPkt " 166 | 167 | # DoS 168 | [[inputs.snmp.table]] 169 | name = "pan_dos" 170 | inherit_tags = [ "hostname" ] 171 | [[inputs.snmp.table.field]] 172 | name = "panFlowPolicyDeny" 173 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.10" 174 | #oid = "PAN-COMMON-MIB::panFlowPolicyDeny" 175 | [[inputs.snmp.table.field]] 176 | name = "panFlowPolicyNat" 177 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.11" 178 | #oid = "PAN-COMMON-MIB::panFlowPolicyNat" 179 | [[inputs.snmp.table.field]] 180 | name = "panFlowScanDrop" 181 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.12" 182 | #oid = "PAN-COMMON-MIB::panFlowScanDrop" 183 | [[inputs.snmp.table.field]] 184 | name = "panFlowDosDropIpBlocked" 185 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.13" 186 | #oid = "PAN-COMMON-MIB::panFlowDosDropIpBlocked" 187 | [[inputs.snmp.table.field]] 188 | name = "panFlowDosRedIcmp" 189 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.14" 190 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp" 191 | [[inputs.snmp.table.field]] 192 | name = "panFlowDosRedIcmp6" 193 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.15" 194 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp6" 195 | [[inputs.snmp.table.field]] 196 | name = "panFlowDosRedIp" 197 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.16" 198 | #oid = "PAN-COMMON-MIB::panFlowDosRedIp" 199 | [[inputs.snmp.table.field]] 200 | name = "panFlowDosRedTcp" 201 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.17" 202 | #oid = "PAN-COMMON-MIB::panFlowDosRedTcp" 203 | [[inputs.snmp.table.field]] 204 | name = "panFlowDosRedUdp" 205 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.18" 206 | #oid = "PAN-COMMON-MIB::panFlowDosRedUdp" 207 | [[inputs.snmp.table.field]] 208 | name = "panFlowDosBlkNumEntries" 209 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.2" 210 | #oid = "PAN-COMMON-MIB::panFlowDosBlkNumEntries" 211 | [[inputs.snmp.table.field]] 212 | name = "panFlowDosRuleAgRedAct" 213 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.20" 214 | #oid = "PAN-COMMON-MIB::panFlowDosRuleAgRedAct" 215 | [[inputs.snmp.table.field]] 216 | name = "panFlowDosRuleDeny" 217 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.22" 218 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDeny" 219 | [[inputs.snmp.table.field]] 220 | name = "panFlowDosRuleDrop" 221 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.23" 222 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDrop" 223 | [[inputs.snmp.table.field]] 224 | name = "panFlowDosRuleDropAggr" 225 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.24" 226 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropAggr" 227 | [[inputs.snmp.table.field]] 228 | name = "panFlowDosRuleDropClBlkDur" 229 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.25" 230 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClBlkDur" 231 | [[inputs.snmp.table.field]] 232 | name = "panFlowDosRuleDropClRedAct" 233 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.26" 234 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClRedAct" 235 | [[inputs.snmp.table.field]] 236 | name = "panFlowDosRuleDropClassified" 237 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.28" 238 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClassified" 239 | [[inputs.snmp.table.field]] 240 | name = "panFlowDosSyncookieBlkDur" 241 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.29" 242 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieBlkDur" 243 | [[inputs.snmp.table.field]] 244 | name = "panFlowDosSyncookieMax" 245 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.30" 246 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieMax" 247 | [[inputs.snmp.table.field]] 248 | name = "panFlowDosClMaxSessLimit" 249 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.3" 250 | #oid = "PAN-COMMON-MIB::panFlowDosClMaxSessLimit" 251 | [[inputs.snmp.table.field]] 252 | name = "panFlowDosZoneRedAct" 253 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.31" 254 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedAct" 255 | [[inputs.snmp.table.field]] 256 | name = "panFlowDosZoneRedMax" 257 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.32" 258 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedMax" 259 | [[inputs.snmp.table.field]] 260 | name = "panFlowDosBlkSwEntries" 261 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.33" 262 | #oid = "PAN-COMMON-MIB::panFlowDosBlkSwEntries" 263 | [[inputs.snmp.table.field]] 264 | name = "panFlowDosBlkHwEntries" 265 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.34" 266 | #oid = "PAN-COMMON-MIB::panFlowDosBlkHwEntries" 267 | [[inputs.snmp.table.field]] 268 | name = "panFlowDosClSyncookieAckErr" 269 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.4" 270 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckErr" 271 | [[inputs.snmp.table.field]] 272 | name = "panFlowDosClSyncookieAckRcv" 273 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.5" 274 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckRcv" 275 | [[inputs.snmp.table.field]] 276 | name = "panFlowDosClSyncookieBlkDur" 277 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.6" 278 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieBlkDur" 279 | [[inputs.snmp.table.field]] 280 | name = "panFlowDosClSyncookieMax" 281 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.7" 282 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieMax" 283 | [[inputs.snmp.table.field]] 284 | name = "panFlowDosClSyncookieSent" 285 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.8" 286 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieSent" 287 | [[inputs.snmp.table.field]] 288 | name = "panFlowMeterVsysThrottle" 289 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.9" 290 | #oid = "PAN-COMMON-MIB::panFlowMeterVsysThrottle" 291 | 292 | # Drops 293 | [[inputs.snmp.table]] 294 | name = "pan_drop" 295 | inherit_tags = [ "hostname" ] 296 | [[inputs.snmp.table.field]] 297 | name = "panFlowFwdL3TtlZero" 298 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.1" 299 | #oid = "PAN-COMMON-MIB::panFlowFwdL3TtlZero" 300 | [[inputs.snmp.table.field]] 301 | name = "panFlowMeterHostThrottle" 302 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.2" 303 | #oid = "PAN-COMMON-MIB::panFlowMeterHostThrottle" 304 | [[inputs.snmp.table.field]] 305 | name = "panFlowHostServiceDeny" 306 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.3" 307 | #oid = "PAN-COMMON-MIB::panFlowHostServiceDeny" 308 | [[inputs.snmp.table.field]] 309 | name = "panFlowHostServiceUnknown" 310 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.4" 311 | #oid = "PAN-COMMON-MIB::panFlowHostServiceUnknown" 312 | [[inputs.snmp.table.field]] 313 | name = "panPktAllocFailure" 314 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.5" 315 | #oid = "PAN-COMMON-MIB::panPktAllocFailure" 316 | [[inputs.snmp.table.field]] 317 | name = "panPktAllocFailureCos" 318 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.6" 319 | #oid = "PAN-COMMON-MIB::panPktAllocFailureCos" 320 | [[inputs.snmp.table.field]] 321 | name = "panSessionDiscard" 322 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.7" 323 | #oid = "PAN-COMMON-MIB::panSessionDiscard" 324 | 325 | # Zones 326 | [[inputs.snmp.table]] 327 | name = "pan_zone" 328 | inherit_tags = [ "hostname" ] 329 | [[inputs.snmp.table.field]] 330 | name = "zone" 331 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.1" 332 | #oid = "PAN-COMMON-MIB::panZoneName" 333 | is_tag = true 334 | [[inputs.snmp.table.field]] 335 | name = "panZoneActiveTcpCps" 336 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.2" 337 | #oid = "PAN-COMMON-MIB::panZoneActiveTcpCps" 338 | [[inputs.snmp.table.field]] 339 | name = "panZoneActiveUdpCps" 340 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.3" 341 | #oid = "PAN-COMMON-MIB::panZoneActiveUdpCps" 342 | [[inputs.snmp.table.field]] 343 | name = "panZoneActiveOtherIpCps" 344 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.4" 345 | #oid = "PAN-COMMON-MIB::panZoneActiveOtherIpCps" 346 | 347 | # Vsys 348 | [[inputs.snmp.table]] 349 | name = "pan_vsys" 350 | inherit_tags = [ "hostname" ] 351 | [[inputs.snmp.table.field]] 352 | name = "Vsys" 353 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.2" 354 | #oid = "PAN-COMMON-MIB::panVsysName" 355 | is_tag = true 356 | [[inputs.snmp.table.field]] 357 | name = "panVsysActiveSessions" 358 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.4" 359 | #oid = "PAN-COMMON-MIB::panVsysActiveSessions" 360 | [[inputs.snmp.table.field]] 361 | name = "panVsysActiveTcpCps" 362 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.6" 363 | #oid = "PAN-COMMON-MIB::panVsysActiveTcpCps" 364 | [[inputs.snmp.table.field]] 365 | name = "panVsysActiveUdpCps" 366 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.7" 367 | #oid = "PAN-COMMON-MIB::panVsysActiveUdpCps" 368 | [[inputs.snmp.table.field]] 369 | name = "panVsysActiveOtherIpCps" 370 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.8" 371 | #oid = "PAN-COMMON-MIB::panVsysActiveOtherIpCps" 372 | 373 | # Memory and buffers 374 | [[inputs.snmp.table]] 375 | name = "pan_buffers" 376 | inherit_tags = [ "hostname" ] 377 | oid = "1.3.6.1.2.1.25.2.3" 378 | [[inputs.snmp.table.field]] 379 | name = "hrStorageDescr" 380 | oid = "1.3.6.1.2.1.25.2.3.1.3" 381 | #oid = "HOST-RESOURCES-MIB::hrStorageDescr" 382 | is_tag = true 383 | -------------------------------------------------------------------------------- /3020.conf: -------------------------------------------------------------------------------- 1 | ### Tested with 3020 but probably valid for 3000 family 2 | 3 | ## snmp v2 config 4 | [[inputs.snmp]] 5 | agents = [ "fw1.domain.com","fw2.domain.com" ] 6 | version = 2 7 | community = "public" 8 | interval = "60s" 9 | 10 | ## snmp v3 config 11 | #[[inputs.snmp]] 12 | # agents = [ "fw1.domain.com","fw2.domain.com" ] 13 | # version = 3 14 | # sec_level = "authPriv" 15 | # sec_name = "name" 16 | # auth_protocol = "sha" 17 | # auth_password = "password" 18 | # priv_protocol = "aes" 19 | # priv_password = "password" 20 | # interval = "60s" 21 | 22 | # System 23 | name = "pan_system" 24 | [inputs.snmp.tags] 25 | cluster = "cluster1" 26 | [[inputs.snmp.field]] 27 | name = "hostname" 28 | oid = ".1.3.6.1.2.1.1.5.0" 29 | is_tag = true 30 | [[inputs.snmp.field]] 31 | name = "uptime" 32 | oid = ".1.3.6.1.2.1.1.3.0" 33 | [[inputs.snmp.field]] 34 | name = "panSysHAState" 35 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.11.0" 36 | #oid = "PAN-COMMON-MIB::panSysHAState" 37 | [[inputs.snmp.field]] 38 | name = "hrProcessorLoad.1" 39 | oid = ".1.3.6.1.2.1.25.3.3.1.2.1" 40 | [[inputs.snmp.field]] 41 | name = "hrProcessorLoad.2" 42 | oid = ".1.3.6.1.2.1.25.3.3.1.2.2" 43 | [[inputs.snmp.field]] 44 | name = "panSessionUtilization" 45 | oid = "iso.3.6.1.4.1.25461.2.1.2.3.1.0" 46 | #oid = "PAN-COMMON-MIB::panSessionUtilization.0" 47 | [[inputs.snmp.field]] 48 | name = "panSessionActiveTcp" 49 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.4.0" 50 | #oid = "PAN-COMMON-MIB::panSessionActiveTcp.0" 51 | [[inputs.snmp.field]] 52 | name = "panSessionActiveUdp" 53 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.5.0" 54 | #oid = "PAN-COMMON-MIB::panSessionActiveUdp.0" 55 | [[inputs.snmp.field]] 56 | name = "panSessionActiveICMP" 57 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.6.0" 58 | #oid = "PAN-COMMON-MIB::panSessionActiveICMP.0" 59 | [[inputs.snmp.field]] 60 | name = "panGPGWUtilizationActiveTunnels" 61 | oid = ".1.3.6.1.4.1.25461.2.1.2.5.1.3.0" 62 | #oid = "PAN-COMMON-MIB::panGPGWUtilizationActiveTunnels.0" 63 | 64 | # Hardware Sensors PA3020 65 | [[inputs.snmp.field]] 66 | name = "fan1" 67 | oid = ".1.3.6.1.2.1.99.1.1.1.4.2" 68 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.2" 69 | [[inputs.snmp.field]] 70 | name = "fan2" 71 | oid = ".1.3.6.1.2.1.99.1.1.1.4.3" 72 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.3" 73 | [[inputs.snmp.field]] 74 | name = "fan3" 75 | oid = ".1.3.6.1.2.1.99.1.1.1.4.4" 76 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.4" 77 | [[inputs.snmp.field]] 78 | name = "fan4" 79 | oid = ".1.3.6.1.2.1.99.1.1.1.4.5" 80 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.5" 81 | [[inputs.snmp.field]] 82 | name = "cpu_temp1" 83 | oid = ".1.3.6.1.2.1.99.1.1.1.4.6" 84 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.6" 85 | [[inputs.snmp.field]] 86 | name = "cpu_temp2" 87 | oid = ".1.3.6.1.2.1.99.1.1.1.4.7" 88 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.7" 89 | [[inputs.snmp.field]] 90 | name = "cpu_temp3" 91 | oid = ".1.3.6.1.2.1.99.1.1.1.4.8" 92 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.8" 93 | [[inputs.snmp.field]] 94 | name = "cpu_temp4" 95 | oid = ".1.3.6.1.2.1.99.1.1.1.4.9" 96 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.9" 97 | [[inputs.snmp.field]] 98 | name = "cpu_temp5" 99 | oid = ".1.3.6.1.2.1.99.1.1.1.4.10" 100 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.10" 101 | [[inputs.snmp.field]] 102 | name = "cpu_temp6" 103 | oid = ".1.3.6.1.2.1.99.1.1.1.4.11" 104 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.11" 105 | 106 | # Global Counters 107 | [[inputs.snmp.table]] 108 | name = "pan_global_counters" 109 | inherit_tags = [ "hostname" ] 110 | [[inputs.snmp.table.field]] 111 | name = "panFlowIpfragFragErr" 112 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.1" 113 | #oid = "PAN-COMMON-MIB::panFlowIpfragFragErr" 114 | [[inputs.snmp.table.field]] 115 | name = "panFlowIpfragRecv" 116 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.2" 117 | #oid = "PAN-COMMON-MIB::panFlowIpfragRecv" 118 | [[inputs.snmp.table.field]] 119 | name = "panTcpAllocWqeFailed" 120 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.1" 121 | #oid = "PAN-COMMON-MIB::panTcpAllocWqeFailed" 122 | [[inputs.snmp.table.field]] 123 | name = "panTcpDeny" 124 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.2" 125 | #oid = "PAN-COMMON-MIB::panTcpDeny" 126 | [[inputs.snmp.table.field]] 127 | name = "panTcpDropOutOfWnd" 128 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.3" 129 | #oid = "PAN-COMMON-MIB::panTcpDropOutOfWnd" 130 | [[inputs.snmp.table.field]] 131 | name = "panTcpDropPacket" 132 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.4" 133 | #oid = "PAN-COMMON-MIB::panTcpDropPacket" 134 | [[inputs.snmp.table.field]] 135 | name = "panFlowActionClose" 136 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.5" 137 | #oid = "PAN-COMMON-MIB::panFlowActionClose" 138 | [[inputs.snmp.table.field]] 139 | name = "panFlowActionReset" 140 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.6" 141 | #oid = "PAN-COMMON-MIB::panFlowActionReset" 142 | [[inputs.snmp.table.field]] 143 | name = "panFlowTcpNonSyn" 144 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.7" 145 | #oid = "PAN-COMMON-MIB::panFlowTcpNonSyn" 146 | [[inputs.snmp.table.field]] 147 | name = "panTcpExceedSegLimit" 148 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.8" 149 | #oid = "PAN-COMMON-MIB::panTcpExceedSegLimit" 150 | [[inputs.snmp.table.field]] 151 | name = "panDfaSw" 152 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.2" 153 | #oid = "PAN-COMMON-MIB::panDfaSw" 154 | [[inputs.snmp.table.field]] 155 | name = "panFlowHostServiceAllow" 156 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.3" 157 | #oid = "PAN-COMMON-MIB::panFlowHostServiceAllow" 158 | [[inputs.snmp.table.field]] 159 | name = "panHaPathmonSent " 160 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.4" 161 | #oid = "PAN-COMMON-MIB::panHaPathmonSent" 162 | [[inputs.snmp.table.field]] 163 | name = "panAhoFpga" 164 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.5" 165 | #oid = "PAN-COMMON-MIB::panAhoFpga" 166 | [[inputs.snmp.table.field]] 167 | name = "panDfaFpga" 168 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.6" 169 | #oid = "PAN-COMMON-MIB::panDfaFpga" 170 | [[inputs.snmp.table.field]] 171 | name = "panFpgaPkt " 172 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.7" 173 | #oid = "PAN-COMMON-MIB::panFpgaPkt " 174 | 175 | # DoS 176 | [[inputs.snmp.table]] 177 | name = "pan_dos" 178 | inherit_tags = [ "hostname" ] 179 | [[inputs.snmp.table.field]] 180 | name = "panFlowPolicyDeny" 181 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.10" 182 | #oid = "PAN-COMMON-MIB::panFlowPolicyDeny" 183 | [[inputs.snmp.table.field]] 184 | name = "panFlowPolicyNat" 185 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.11" 186 | #oid = "PAN-COMMON-MIB::panFlowPolicyNat" 187 | [[inputs.snmp.table.field]] 188 | name = "panFlowScanDrop" 189 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.12" 190 | #oid = "PAN-COMMON-MIB::panFlowScanDrop" 191 | [[inputs.snmp.table.field]] 192 | name = "panFlowDosDropIpBlocked" 193 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.13" 194 | #oid = "PAN-COMMON-MIB::panFlowDosDropIpBlocked" 195 | [[inputs.snmp.table.field]] 196 | name = "panFlowDosRedIcmp" 197 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.14" 198 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp" 199 | [[inputs.snmp.table.field]] 200 | name = "panFlowDosRedIcmp6" 201 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.15" 202 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp6" 203 | [[inputs.snmp.table.field]] 204 | name = "panFlowDosRedIp" 205 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.16" 206 | #oid = "PAN-COMMON-MIB::panFlowDosRedIp" 207 | [[inputs.snmp.table.field]] 208 | name = "panFlowDosRedTcp" 209 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.17" 210 | #oid = "PAN-COMMON-MIB::panFlowDosRedTcp" 211 | [[inputs.snmp.table.field]] 212 | name = "panFlowDosRedUdp" 213 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.18" 214 | #oid = "PAN-COMMON-MIB::panFlowDosRedUdp" 215 | [[inputs.snmp.table.field]] 216 | name = "panFlowDosBlkNumEntries" 217 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.2" 218 | #oid = "PAN-COMMON-MIB::panFlowDosBlkNumEntries" 219 | [[inputs.snmp.table.field]] 220 | name = "panFlowDosRuleAgRedAct" 221 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.20" 222 | #oid = "PAN-COMMON-MIB::panFlowDosRuleAgRedAct" 223 | [[inputs.snmp.table.field]] 224 | name = "panFlowDosRuleDeny" 225 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.22" 226 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDeny" 227 | [[inputs.snmp.table.field]] 228 | name = "panFlowDosRuleDrop" 229 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.23" 230 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDrop" 231 | [[inputs.snmp.table.field]] 232 | name = "panFlowDosRuleDropAggr" 233 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.24" 234 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropAggr" 235 | [[inputs.snmp.table.field]] 236 | name = "panFlowDosRuleDropClBlkDur" 237 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.25" 238 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClBlkDur" 239 | [[inputs.snmp.table.field]] 240 | name = "panFlowDosRuleDropClRedAct" 241 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.26" 242 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClRedAct" 243 | [[inputs.snmp.table.field]] 244 | name = "panFlowDosRuleDropClassified" 245 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.28" 246 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClassified" 247 | [[inputs.snmp.table.field]] 248 | name = "panFlowDosSyncookieBlkDur" 249 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.29" 250 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieBlkDur" 251 | [[inputs.snmp.table.field]] 252 | name = "panFlowDosSyncookieMax" 253 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.30" 254 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieMax" 255 | [[inputs.snmp.table.field]] 256 | name = "panFlowDosClMaxSessLimit" 257 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.3" 258 | #oid = "PAN-COMMON-MIB::panFlowDosClMaxSessLimit" 259 | [[inputs.snmp.table.field]] 260 | name = "panFlowDosZoneRedAct" 261 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.31" 262 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedAct" 263 | [[inputs.snmp.table.field]] 264 | name = "panFlowDosZoneRedMax" 265 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.32" 266 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedMax" 267 | [[inputs.snmp.table.field]] 268 | name = "panFlowDosBlkSwEntries" 269 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.33" 270 | #oid = "PAN-COMMON-MIB::panFlowDosBlkSwEntries" 271 | [[inputs.snmp.table.field]] 272 | name = "panFlowDosBlkHwEntries" 273 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.34" 274 | #oid = "PAN-COMMON-MIB::panFlowDosBlkHwEntries" 275 | [[inputs.snmp.table.field]] 276 | name = "panFlowDosClSyncookieAckErr" 277 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.4" 278 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckErr" 279 | [[inputs.snmp.table.field]] 280 | name = "panFlowDosClSyncookieAckRcv" 281 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.5" 282 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckRcv" 283 | [[inputs.snmp.table.field]] 284 | name = "panFlowDosClSyncookieBlkDur" 285 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.6" 286 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieBlkDur" 287 | [[inputs.snmp.table.field]] 288 | name = "panFlowDosClSyncookieMax" 289 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.7" 290 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieMax" 291 | [[inputs.snmp.table.field]] 292 | name = "panFlowDosClSyncookieSent" 293 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.8" 294 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieSent" 295 | [[inputs.snmp.table.field]] 296 | name = "panFlowMeterVsysThrottle" 297 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.9" 298 | #oid = "PAN-COMMON-MIB::panFlowMeterVsysThrottle" 299 | 300 | # Drops 301 | [[inputs.snmp.table]] 302 | name = "pan_drop" 303 | inherit_tags = [ "hostname" ] 304 | [[inputs.snmp.table.field]] 305 | name = "panFlowFwdL3TtlZero" 306 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.1" 307 | #oid = "PAN-COMMON-MIB::panFlowFwdL3TtlZero" 308 | [[inputs.snmp.table.field]] 309 | name = "panFlowMeterHostThrottle" 310 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.2" 311 | #oid = "PAN-COMMON-MIB::panFlowMeterHostThrottle" 312 | [[inputs.snmp.table.field]] 313 | name = "panFlowHostServiceDeny" 314 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.3" 315 | #oid = "PAN-COMMON-MIB::panFlowHostServiceDeny" 316 | [[inputs.snmp.table.field]] 317 | name = "panFlowHostServiceUnknown" 318 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.4" 319 | #oid = "PAN-COMMON-MIB::panFlowHostServiceUnknown" 320 | [[inputs.snmp.table.field]] 321 | name = "panPktAllocFailure" 322 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.5" 323 | #oid = "PAN-COMMON-MIB::panPktAllocFailure" 324 | [[inputs.snmp.table.field]] 325 | name = "panPktAllocFailureCos" 326 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.6" 327 | #oid = "PAN-COMMON-MIB::panPktAllocFailureCos" 328 | [[inputs.snmp.table.field]] 329 | name = "panSessionDiscard" 330 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.7" 331 | #oid = "PAN-COMMON-MIB::panSessionDiscard" 332 | 333 | # Zones 334 | [[inputs.snmp.table]] 335 | name = "pan_zone" 336 | inherit_tags = [ "hostname" ] 337 | [[inputs.snmp.table.field]] 338 | name = "zone" 339 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.1" 340 | #oid = "PAN-COMMON-MIB::panZoneName" 341 | is_tag = true 342 | [[inputs.snmp.table.field]] 343 | name = "panZoneActiveTcpCps" 344 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.2" 345 | #oid = "PAN-COMMON-MIB::panZoneActiveTcpCps" 346 | [[inputs.snmp.table.field]] 347 | name = "panZoneActiveUdpCps" 348 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.3" 349 | #oid = "PAN-COMMON-MIB::panZoneActiveUdpCps" 350 | [[inputs.snmp.table.field]] 351 | name = "panZoneActiveOtherIpCps" 352 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.4" 353 | #oid = "PAN-COMMON-MIB::panZoneActiveOtherIpCps" 354 | 355 | # Vsys 356 | [[inputs.snmp.table]] 357 | name = "pan_vsys" 358 | inherit_tags = [ "hostname" ] 359 | [[inputs.snmp.table.field]] 360 | name = "Vsys" 361 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.2" 362 | #oid = "PAN-COMMON-MIB::panVsysName" 363 | is_tag = true 364 | [[inputs.snmp.table.field]] 365 | name = "panVsysActiveSessions" 366 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.4" 367 | #oid = "PAN-COMMON-MIB::panVsysActiveSessions" 368 | [[inputs.snmp.table.field]] 369 | name = "panVsysActiveTcpCps" 370 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.6" 371 | #oid = "PAN-COMMON-MIB::panVsysActiveTcpCps" 372 | [[inputs.snmp.table.field]] 373 | name = "panVsysActiveUdpCps" 374 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.7" 375 | #oid = "PAN-COMMON-MIB::panVsysActiveUdpCps" 376 | [[inputs.snmp.table.field]] 377 | name = "panVsysActiveOtherIpCps" 378 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.8" 379 | #oid = "PAN-COMMON-MIB::panVsysActiveOtherIpCps" 380 | 381 | # Memory and buffers 382 | [[inputs.snmp.table]] 383 | name = "pan_buffers" 384 | inherit_tags = [ "hostname" ] 385 | oid = "1.3.6.1.2.1.25.2.3" 386 | [[inputs.snmp.table.field]] 387 | name = "hrStorageDescr" 388 | oid = "1.3.6.1.2.1.25.2.3.1.3" 389 | #oid = "HOST-RESOURCES-MIB::hrStorageDescr" 390 | is_tag = true -------------------------------------------------------------------------------- /5050.conf: -------------------------------------------------------------------------------- 1 | ### Tested with 5250 but probably valid for 5200 family 2 | 3 | ## snmp v2 config 4 | [[inputs.snmp]] 5 | agents = [ "fw1.domain.com","fw2.domain.com" ] 6 | version = 2 7 | community = "public" 8 | interval = "60s" 9 | 10 | ## snmp v3 config 11 | #[[inputs.snmp]] 12 | # agents = [ "fw1.domain.com","fw2.domain.com" ] 13 | # version = 3 14 | # sec_level = "authPriv" 15 | # sec_name = "name" 16 | # auth_protocol = "sha" 17 | # auth_password = "password" 18 | # priv_protocol = "aes" 19 | # priv_password = "password" 20 | # interval = "60s" 21 | 22 | # System 23 | name = "pan_system" 24 | [inputs.snmp.tags] 25 | cluster = "cluster1" 26 | [[inputs.snmp.field]] 27 | name = "hostname" 28 | oid = ".1.3.6.1.2.1.1.5.0" 29 | is_tag = true 30 | [[inputs.snmp.field]] 31 | name = "uptime" 32 | oid = ".1.3.6.1.2.1.1.3.0" 33 | [[inputs.snmp.field]] 34 | name = "panSysHAState" 35 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.11.0" 36 | #oid = "PAN-COMMON-MIB::panSysHAState" 37 | [[inputs.snmp.field]] 38 | name = "hrProcessorLoad.1" 39 | oid = ".1.3.6.1.2.1.25.3.3.1.2.1" 40 | [[inputs.snmp.field]] 41 | name = "hrProcessorLoad.2" 42 | oid = ".1.3.6.1.2.1.25.3.3.1.2.2" 43 | [[inputs.snmp.field]] 44 | name = "panSessionUtilization" 45 | oid = "iso.3.6.1.4.1.25461.2.1.2.3.1.0" 46 | #oid = "PAN-COMMON-MIB::panSessionUtilization.0" 47 | [[inputs.snmp.field]] 48 | name = "panSessionActiveTcp" 49 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.4.0" 50 | #oid = "PAN-COMMON-MIB::panSessionActiveTcp.0" 51 | [[inputs.snmp.field]] 52 | name = "panSessionActiveUdp" 53 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.5.0" 54 | #oid = "PAN-COMMON-MIB::panSessionActiveUdp.0" 55 | [[inputs.snmp.field]] 56 | name = "panSessionActiveICMP" 57 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.6.0" 58 | #oid = "PAN-COMMON-MIB::panSessionActiveICMP.0" 59 | [[inputs.snmp.field]] 60 | name = "panGPGWUtilizationActiveTunnels" 61 | oid = ".1.3.6.1.4.1.25461.2.1.2.5.1.3.0" 62 | #oid = "PAN-COMMON-MIB::panGPGWUtilizationActiveTunnels.0" 63 | 64 | # Hardware Sensors PA5250 65 | [[inputs.snmp.field]] 66 | name = "fan1" 67 | oid = ".1.3.6.1.2.1.99.1.1.1.4.5" 68 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.5 69 | [[inputs.snmp.field]] 70 | name = "fan2" 71 | oid = ".1.3.6.1.2.1.99.1.1.1.4.6" 72 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.6 73 | [[inputs.snmp.field]] 74 | name = "fan3" 75 | oid = ".1.3.6.1.2.1.99.1.1.1.4.7" 76 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.7 77 | [[inputs.snmp.field]] 78 | name = "fan4" 79 | oid = ".1.3.6.1.2.1.99.1.1.1.4.8" 80 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.8 81 | [[inputs.snmp.field]] 82 | name = "fan5" 83 | oid = ".1.3.6.1.2.1.99.1.1.1.4.9" 84 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.9 85 | [[inputs.snmp.field]] 86 | name = "fan6" 87 | oid = ".1.3.6.1.2.1.99.1.1.1.4.10" 88 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.10 89 | [[inputs.snmp.field]] 90 | name = "fan7" 91 | oid = ".1.3.6.1.2.1.99.1.1.1.4.11" 92 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.11 93 | [[inputs.snmp.field]] 94 | name = "fan8" 95 | oid = ".1.3.6.1.2.1.99.1.1.1.4.12" 96 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.12 97 | [[inputs.snmp.field]] 98 | name = "fan9" 99 | oid = ".1.3.6.1.2.1.99.1.1.1.4.13" 100 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.13 101 | [[inputs.snmp.field]] 102 | name = "fan10" 103 | oid = ".1.3.6.1.2.1.99.1.1.1.4.14" 104 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.14 105 | [[inputs.snmp.field]] 106 | name = "cpu_temp1" 107 | oid = ".1.3.6.1.2.1.99.1.1.1.4.15" 108 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.15 109 | [[inputs.snmp.field]] 110 | name = "cpu_temp2" 111 | oid = ".1.3.6.1.2.1.99.1.1.1.4.16" 112 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.16 113 | [[inputs.snmp.field]] 114 | name = "cpu_temp3" 115 | oid = ".1.3.6.1.2.1.99.1.1.1.4.17" 116 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.17 117 | [[inputs.snmp.field]] 118 | name = "cpu_temp4" 119 | oid = ".1.3.6.1.2.1.99.1.1.1.4.18" 120 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.18 121 | 122 | # Global Counters 123 | [[inputs.snmp.table]] 124 | name = "pan_global_counters" 125 | inherit_tags = [ "hostname" ] 126 | [[inputs.snmp.table.field]] 127 | name = "panFlowIpfragFragErr" 128 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.1" 129 | #oid = "PAN-COMMON-MIB::panFlowIpfragFragErr" 130 | [[inputs.snmp.table.field]] 131 | name = "panFlowIpfragRecv" 132 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.2" 133 | #oid = "PAN-COMMON-MIB::panFlowIpfragRecv" 134 | [[inputs.snmp.table.field]] 135 | name = "panTcpAllocWqeFailed" 136 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.1" 137 | #oid = "PAN-COMMON-MIB::panTcpAllocWqeFailed" 138 | [[inputs.snmp.table.field]] 139 | name = "panTcpDeny" 140 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.2" 141 | #oid = "PAN-COMMON-MIB::panTcpDeny" 142 | [[inputs.snmp.table.field]] 143 | name = "panTcpDropOutOfWnd" 144 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.3" 145 | #oid = "PAN-COMMON-MIB::panTcpDropOutOfWnd" 146 | [[inputs.snmp.table.field]] 147 | name = "panTcpDropPacket" 148 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.4" 149 | #oid = "PAN-COMMON-MIB::panTcpDropPacket" 150 | [[inputs.snmp.table.field]] 151 | name = "panFlowActionClose" 152 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.5" 153 | #oid = "PAN-COMMON-MIB::panFlowActionClose" 154 | [[inputs.snmp.table.field]] 155 | name = "panFlowActionReset" 156 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.6" 157 | #oid = "PAN-COMMON-MIB::panFlowActionReset" 158 | [[inputs.snmp.table.field]] 159 | name = "panFlowTcpNonSyn" 160 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.7" 161 | #oid = "PAN-COMMON-MIB::panFlowTcpNonSyn" 162 | [[inputs.snmp.table.field]] 163 | name = "panTcpExceedSegLimit" 164 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.8" 165 | #oid = "PAN-COMMON-MIB::panTcpExceedSegLimit" 166 | [[inputs.snmp.table.field]] 167 | name = "panDfaSw" 168 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.2" 169 | #oid = "PAN-COMMON-MIB::panDfaSw" 170 | [[inputs.snmp.table.field]] 171 | name = "panFlowHostServiceAllow" 172 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.3" 173 | #oid = "PAN-COMMON-MIB::panFlowHostServiceAllow" 174 | [[inputs.snmp.table.field]] 175 | name = "panHaPathmonSent " 176 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.4" 177 | #oid = "PAN-COMMON-MIB::panHaPathmonSent" 178 | [[inputs.snmp.table.field]] 179 | name = "panAhoFpga" 180 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.5" 181 | #oid = "PAN-COMMON-MIB::panAhoFpga" 182 | [[inputs.snmp.table.field]] 183 | name = "panDfaFpga" 184 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.6" 185 | #oid = "PAN-COMMON-MIB::panDfaFpga" 186 | [[inputs.snmp.table.field]] 187 | name = "panFpgaPkt " 188 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.7" 189 | #oid = "PAN-COMMON-MIB::panFpgaPkt " 190 | 191 | # DoS 192 | [[inputs.snmp.table]] 193 | name = "pan_dos" 194 | inherit_tags = [ "hostname" ] 195 | [[inputs.snmp.table.field]] 196 | name = "panFlowPolicyDeny" 197 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.10" 198 | #oid = "PAN-COMMON-MIB::panFlowPolicyDeny" 199 | [[inputs.snmp.table.field]] 200 | name = "panFlowPolicyNat" 201 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.11" 202 | #oid = "PAN-COMMON-MIB::panFlowPolicyNat" 203 | [[inputs.snmp.table.field]] 204 | name = "panFlowScanDrop" 205 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.12" 206 | #oid = "PAN-COMMON-MIB::panFlowScanDrop" 207 | [[inputs.snmp.table.field]] 208 | name = "panFlowDosDropIpBlocked" 209 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.13" 210 | #oid = "PAN-COMMON-MIB::panFlowDosDropIpBlocked" 211 | [[inputs.snmp.table.field]] 212 | name = "panFlowDosRedIcmp" 213 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.14" 214 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp" 215 | [[inputs.snmp.table.field]] 216 | name = "panFlowDosRedIcmp6" 217 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.15" 218 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp6" 219 | [[inputs.snmp.table.field]] 220 | name = "panFlowDosRedIp" 221 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.16" 222 | #oid = "PAN-COMMON-MIB::panFlowDosRedIp" 223 | [[inputs.snmp.table.field]] 224 | name = "panFlowDosRedTcp" 225 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.17" 226 | #oid = "PAN-COMMON-MIB::panFlowDosRedTcp" 227 | [[inputs.snmp.table.field]] 228 | name = "panFlowDosRedUdp" 229 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.18" 230 | #oid = "PAN-COMMON-MIB::panFlowDosRedUdp" 231 | [[inputs.snmp.table.field]] 232 | name = "panFlowDosBlkNumEntries" 233 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.2" 234 | #oid = "PAN-COMMON-MIB::panFlowDosBlkNumEntries" 235 | [[inputs.snmp.table.field]] 236 | name = "panFlowDosRuleAgRedAct" 237 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.20" 238 | #oid = "PAN-COMMON-MIB::panFlowDosRuleAgRedAct" 239 | [[inputs.snmp.table.field]] 240 | name = "panFlowDosRuleDeny" 241 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.22" 242 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDeny" 243 | [[inputs.snmp.table.field]] 244 | name = "panFlowDosRuleDrop" 245 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.23" 246 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDrop" 247 | [[inputs.snmp.table.field]] 248 | name = "panFlowDosRuleDropAggr" 249 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.24" 250 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropAggr" 251 | [[inputs.snmp.table.field]] 252 | name = "panFlowDosRuleDropClBlkDur" 253 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.25" 254 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClBlkDur" 255 | [[inputs.snmp.table.field]] 256 | name = "panFlowDosRuleDropClRedAct" 257 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.26" 258 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClRedAct" 259 | [[inputs.snmp.table.field]] 260 | name = "panFlowDosRuleDropClassified" 261 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.28" 262 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClassified" 263 | [[inputs.snmp.table.field]] 264 | name = "panFlowDosSyncookieBlkDur" 265 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.29" 266 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieBlkDur" 267 | [[inputs.snmp.table.field]] 268 | name = "panFlowDosSyncookieMax" 269 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.30" 270 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieMax" 271 | [[inputs.snmp.table.field]] 272 | name = "panFlowDosClMaxSessLimit" 273 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.3" 274 | #oid = "PAN-COMMON-MIB::panFlowDosClMaxSessLimit" 275 | [[inputs.snmp.table.field]] 276 | name = "panFlowDosZoneRedAct" 277 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.31" 278 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedAct" 279 | [[inputs.snmp.table.field]] 280 | name = "panFlowDosZoneRedMax" 281 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.32" 282 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedMax" 283 | [[inputs.snmp.table.field]] 284 | name = "panFlowDosBlkSwEntries" 285 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.33" 286 | #oid = "PAN-COMMON-MIB::panFlowDosBlkSwEntries" 287 | [[inputs.snmp.table.field]] 288 | name = "panFlowDosBlkHwEntries" 289 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.34" 290 | #oid = "PAN-COMMON-MIB::panFlowDosBlkHwEntries" 291 | [[inputs.snmp.table.field]] 292 | name = "panFlowDosClSyncookieAckErr" 293 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.4" 294 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckErr" 295 | [[inputs.snmp.table.field]] 296 | name = "panFlowDosClSyncookieAckRcv" 297 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.5" 298 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckRcv" 299 | [[inputs.snmp.table.field]] 300 | name = "panFlowDosClSyncookieBlkDur" 301 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.6" 302 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieBlkDur" 303 | [[inputs.snmp.table.field]] 304 | name = "panFlowDosClSyncookieMax" 305 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.7" 306 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieMax" 307 | [[inputs.snmp.table.field]] 308 | name = "panFlowDosClSyncookieSent" 309 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.8" 310 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieSent" 311 | [[inputs.snmp.table.field]] 312 | name = "panFlowMeterVsysThrottle" 313 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.9" 314 | #oid = "PAN-COMMON-MIB::panFlowMeterVsysThrottle" 315 | 316 | # Drops 317 | [[inputs.snmp.table]] 318 | name = "pan_drop" 319 | inherit_tags = [ "hostname" ] 320 | [[inputs.snmp.table.field]] 321 | name = "panFlowFwdL3TtlZero" 322 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.1" 323 | #oid = "PAN-COMMON-MIB::panFlowFwdL3TtlZero" 324 | [[inputs.snmp.table.field]] 325 | name = "panFlowMeterHostThrottle" 326 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.2" 327 | #oid = "PAN-COMMON-MIB::panFlowMeterHostThrottle" 328 | [[inputs.snmp.table.field]] 329 | name = "panFlowHostServiceDeny" 330 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.3" 331 | #oid = "PAN-COMMON-MIB::panFlowHostServiceDeny" 332 | [[inputs.snmp.table.field]] 333 | name = "panFlowHostServiceUnknown" 334 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.4" 335 | #oid = "PAN-COMMON-MIB::panFlowHostServiceUnknown" 336 | [[inputs.snmp.table.field]] 337 | name = "panPktAllocFailure" 338 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.5" 339 | #oid = "PAN-COMMON-MIB::panPktAllocFailure" 340 | [[inputs.snmp.table.field]] 341 | name = "panPktAllocFailureCos" 342 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.6" 343 | #oid = "PAN-COMMON-MIB::panPktAllocFailureCos" 344 | [[inputs.snmp.table.field]] 345 | name = "panSessionDiscard" 346 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.7" 347 | #oid = "PAN-COMMON-MIB::panSessionDiscard" 348 | 349 | # Zones 350 | [[inputs.snmp.table]] 351 | name = "pan_zone" 352 | inherit_tags = [ "hostname" ] 353 | [[inputs.snmp.table.field]] 354 | name = "zone" 355 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.1" 356 | #oid = "PAN-COMMON-MIB::panZoneName" 357 | is_tag = true 358 | [[inputs.snmp.table.field]] 359 | name = "panZoneActiveTcpCps" 360 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.2" 361 | #oid = "PAN-COMMON-MIB::panZoneActiveTcpCps" 362 | [[inputs.snmp.table.field]] 363 | name = "panZoneActiveUdpCps" 364 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.3" 365 | #oid = "PAN-COMMON-MIB::panZoneActiveUdpCps" 366 | [[inputs.snmp.table.field]] 367 | name = "panZoneActiveOtherIpCps" 368 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.4" 369 | #oid = "PAN-COMMON-MIB::panZoneActiveOtherIpCps" 370 | 371 | # Vsys 372 | [[inputs.snmp.table]] 373 | name = "pan_vsys" 374 | inherit_tags = [ "hostname" ] 375 | [[inputs.snmp.table.field]] 376 | name = "Vsys" 377 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.2" 378 | #oid = "PAN-COMMON-MIB::panVsysName" 379 | is_tag = true 380 | [[inputs.snmp.table.field]] 381 | name = "panVsysActiveSessions" 382 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.4" 383 | #oid = "PAN-COMMON-MIB::panVsysActiveSessions" 384 | [[inputs.snmp.table.field]] 385 | name = "panVsysActiveTcpCps" 386 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.6" 387 | #oid = "PAN-COMMON-MIB::panVsysActiveTcpCps" 388 | [[inputs.snmp.table.field]] 389 | name = "panVsysActiveUdpCps" 390 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.7" 391 | #oid = "PAN-COMMON-MIB::panVsysActiveUdpCps" 392 | [[inputs.snmp.table.field]] 393 | name = "panVsysActiveOtherIpCps" 394 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.8" 395 | #oid = "PAN-COMMON-MIB::panVsysActiveOtherIpCps" 396 | 397 | # Memory and buffers 398 | [[inputs.snmp.table]] 399 | name = "pan_buffers" 400 | inherit_tags = [ "hostname" ] 401 | oid = "1.3.6.1.2.1.25.2.3" 402 | [[inputs.snmp.table.field]] 403 | name = "hrStorageDescr" 404 | oid = "1.3.6.1.2.1.25.2.3.1.3" 405 | #oid = "HOST-RESOURCES-MIB::hrStorageDescr" 406 | is_tag = true -------------------------------------------------------------------------------- /5250.conf: -------------------------------------------------------------------------------- 1 | ### Tested with 5250 but probably valid for 5200 family 2 | 3 | ## snmp v2 config 4 | [[inputs.snmp]] 5 | agents = [ "fw1.domain.com","fw2.domain.com" ] 6 | version = 2 7 | community = "public" 8 | interval = "60s" 9 | 10 | ## snmp v3 config 11 | #[[inputs.snmp]] 12 | # agents = [ "fw1.domain.com","fw2.domain.com" ] 13 | # version = 3 14 | # sec_level = "authPriv" 15 | # sec_name = "name" 16 | # auth_protocol = "sha" 17 | # auth_password = "password" 18 | # priv_protocol = "aes" 19 | # priv_password = "password" 20 | # interval = "60s" 21 | 22 | # System 23 | name = "pan_system" 24 | [inputs.snmp.tags] 25 | cluster = "cluster1" 26 | [[inputs.snmp.field]] 27 | name = "hostname" 28 | oid = ".1.3.6.1.2.1.1.5.0" 29 | is_tag = true 30 | [[inputs.snmp.field]] 31 | name = "uptime" 32 | oid = ".1.3.6.1.2.1.1.3.0" 33 | [[inputs.snmp.field]] 34 | name = "panSysHAState" 35 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.11.0" 36 | #oid = "PAN-COMMON-MIB::panSysHAState" 37 | [[inputs.snmp.field]] 38 | name = "hrProcessorLoad.1" 39 | oid = ".1.3.6.1.2.1.25.3.3.1.2.1" 40 | [[inputs.snmp.field]] 41 | name = "hrProcessorLoad.2" 42 | oid = ".1.3.6.1.2.1.25.3.3.1.2.2" 43 | [[inputs.snmp.field]] 44 | name = "panSessionUtilization" 45 | oid = "iso.3.6.1.4.1.25461.2.1.2.3.1.0" 46 | #oid = "PAN-COMMON-MIB::panSessionUtilization.0" 47 | [[inputs.snmp.field]] 48 | name = "panSessionActiveTcp" 49 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.4.0" 50 | #oid = "PAN-COMMON-MIB::panSessionActiveTcp.0" 51 | [[inputs.snmp.field]] 52 | name = "panSessionActiveUdp" 53 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.5.0" 54 | #oid = "PAN-COMMON-MIB::panSessionActiveUdp.0" 55 | [[inputs.snmp.field]] 56 | name = "panSessionActiveICMP" 57 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.6.0" 58 | #oid = "PAN-COMMON-MIB::panSessionActiveICMP.0" 59 | [[inputs.snmp.field]] 60 | name = "panGPGWUtilizationActiveTunnels" 61 | oid = ".1.3.6.1.4.1.25461.2.1.2.5.1.3.0" 62 | #oid = "PAN-COMMON-MIB::panGPGWUtilizationActiveTunnels.0" 63 | 64 | # Hardware Sensors PA5250 65 | [[inputs.snmp.field]] 66 | name = "fan1.1" 67 | oid = ".1.3.6.1.2.1.99.1.1.1.4.4" 68 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.4 69 | [[inputs.snmp.field]] 70 | name = "fan1.2" 71 | oid = ".1.3.6.1.2.1.99.1.1.1.4.5" 72 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.5 73 | [[inputs.snmp.field]] 74 | name = "fan1.3" 75 | oid = ".1.3.6.1.2.1.99.1.1.1.4.6" 76 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.6 77 | [[inputs.snmp.field]] 78 | name = "fan1.4" 79 | oid = ".1.3.6.1.2.1.99.1.1.1.4.7" 80 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.7 81 | [[inputs.snmp.field]] 82 | name = "fan2.1" 83 | oid = ".1.3.6.1.2.1.99.1.1.1.4.8" 84 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.8 85 | [[inputs.snmp.field]] 86 | name = "fan2.2" 87 | oid = ".1.3.6.1.2.1.99.1.1.1.4.9" 88 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.9 89 | [[inputs.snmp.field]] 90 | name = "fan2.3" 91 | oid = ".1.3.6.1.2.1.99.1.1.1.4.10" 92 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.10 93 | [[inputs.snmp.field]] 94 | name = "fan2.4" 95 | oid = ".1.3.6.1.2.1.99.1.1.1.4.11" 96 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.11 97 | [[inputs.snmp.field]] 98 | name = "MP_Core_temp" 99 | oid = ".1.3.6.1.2.1.99.1.1.1.4.12" 100 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.12 101 | [[inputs.snmp.field]] 102 | name = "CP_temp" 103 | oid = ".1.3.6.1.2.1.99.1.1.1.4.13" 104 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.13 105 | [[inputs.snmp.field]] 106 | name = "DP0_CE_temp" 107 | oid = ".1.3.6.1.2.1.99.1.1.1.4.14" 108 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.14 109 | [[inputs.snmp.field]] 110 | name = "DP0_Core_temp" 111 | oid = ".1.3.6.1.2.1.99.1.1.1.4.15" 112 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.15 113 | [[inputs.snmp.field]] 114 | name = "DP1_Core_temp" 115 | oid = ".1.3.6.1.2.1.99.1.1.1.4.16" 116 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.16 117 | [[inputs.snmp.field]] 118 | name = "TopFront_temp" 119 | oid = ".1.3.6.1.2.1.99.1.1.1.4.17" 120 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.17 121 | [[inputs.snmp.field]] 122 | name = "Switch_temp" 123 | oid = ".1.3.6.1.2.1.99.1.1.1.4.18" 124 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.18 125 | [[inputs.snmp.field]] 126 | name = "CP_Core_temp" 127 | oid = ".1.3.6.1.2.1.99.1.1.1.4.19" 128 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.19 129 | [[inputs.snmp.field]] 130 | name = "Switch_Core_temp" 131 | oid = ".1.3.6.1.2.1.99.1.1.1.4.20" 132 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.20 133 | [[inputs.snmp.field]] 134 | name = "NP_Core_temp" 135 | oid = ".1.3.6.1.2.1.99.1.1.1.4.21" 136 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.21 137 | [[inputs.snmp.field]] 138 | name = "BottomFront_temp" 139 | oid = ".1.3.6.1.2.1.99.1.1.1.4.22" 140 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.g22 141 | [[inputs.snmp.field]] 142 | name = "DP1_DP2_temp" 143 | oid = ".1.3.6.1.2.1.99.1.1.1.4.23" 144 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.23 145 | [[inputs.snmp.field]] 146 | name = "Bottom_Rear_temp" 147 | oid = ".1.3.6.1.2.1.99.1.1.1.4.24" 148 | #oid = "ENTITY-SENSOR-MIB::entPhySensorValue.24 149 | 150 | 151 | # Global Counters 152 | [[inputs.snmp.table]] 153 | name = "pan_global_counters" 154 | inherit_tags = [ "hostname" ] 155 | [[inputs.snmp.table.field]] 156 | name = "panFlowIpfragFragErr" 157 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.1" 158 | #oid = "PAN-COMMON-MIB::panFlowIpfragFragErr" 159 | [[inputs.snmp.table.field]] 160 | name = "panFlowIpfragRecv" 161 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.10.2" 162 | #oid = "PAN-COMMON-MIB::panFlowIpfragRecv" 163 | [[inputs.snmp.table.field]] 164 | name = "panTcpAllocWqeFailed" 165 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.1" 166 | #oid = "PAN-COMMON-MIB::panTcpAllocWqeFailed" 167 | [[inputs.snmp.table.field]] 168 | name = "panTcpDeny" 169 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.2" 170 | #oid = "PAN-COMMON-MIB::panTcpDeny" 171 | [[inputs.snmp.table.field]] 172 | name = "panTcpDropOutOfWnd" 173 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.3" 174 | #oid = "PAN-COMMON-MIB::panTcpDropOutOfWnd" 175 | [[inputs.snmp.table.field]] 176 | name = "panTcpDropPacket" 177 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.4" 178 | #oid = "PAN-COMMON-MIB::panTcpDropPacket" 179 | [[inputs.snmp.table.field]] 180 | name = "panFlowActionClose" 181 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.5" 182 | #oid = "PAN-COMMON-MIB::panFlowActionClose" 183 | [[inputs.snmp.table.field]] 184 | name = "panFlowActionReset" 185 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.6" 186 | #oid = "PAN-COMMON-MIB::panFlowActionReset" 187 | [[inputs.snmp.table.field]] 188 | name = "panFlowTcpNonSyn" 189 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.7" 190 | #oid = "PAN-COMMON-MIB::panFlowTcpNonSyn" 191 | [[inputs.snmp.table.field]] 192 | name = "panTcpExceedSegLimit" 193 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.11.8" 194 | #oid = "PAN-COMMON-MIB::panTcpExceedSegLimit" 195 | [[inputs.snmp.table.field]] 196 | name = "panDfaSw" 197 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.2" 198 | #oid = "PAN-COMMON-MIB::panDfaSw" 199 | [[inputs.snmp.table.field]] 200 | name = "panFlowHostServiceAllow" 201 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.3" 202 | #oid = "PAN-COMMON-MIB::panFlowHostServiceAllow" 203 | [[inputs.snmp.table.field]] 204 | name = "panHaPathmonSent " 205 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.4" 206 | #oid = "PAN-COMMON-MIB::panHaPathmonSent" 207 | [[inputs.snmp.table.field]] 208 | name = "panAhoFpga" 209 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.5" 210 | #oid = "PAN-COMMON-MIB::panAhoFpga" 211 | [[inputs.snmp.table.field]] 212 | name = "panDfaFpga" 213 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.6" 214 | #oid = "PAN-COMMON-MIB::panDfaFpga" 215 | [[inputs.snmp.table.field]] 216 | name = "panFpgaPkt " 217 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.7" 218 | #oid = "PAN-COMMON-MIB::panFpgaPkt " 219 | 220 | # DoS 221 | [[inputs.snmp.table]] 222 | name = "pan_dos" 223 | inherit_tags = [ "hostname" ] 224 | [[inputs.snmp.table.field]] 225 | name = "panFlowPolicyDeny" 226 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.10" 227 | #oid = "PAN-COMMON-MIB::panFlowPolicyDeny" 228 | [[inputs.snmp.table.field]] 229 | name = "panFlowPolicyNat" 230 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.11" 231 | #oid = "PAN-COMMON-MIB::panFlowPolicyNat" 232 | [[inputs.snmp.table.field]] 233 | name = "panFlowScanDrop" 234 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.12" 235 | #oid = "PAN-COMMON-MIB::panFlowScanDrop" 236 | [[inputs.snmp.table.field]] 237 | name = "panFlowDosDropIpBlocked" 238 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.13" 239 | #oid = "PAN-COMMON-MIB::panFlowDosDropIpBlocked" 240 | [[inputs.snmp.table.field]] 241 | name = "panFlowDosRedIcmp" 242 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.14" 243 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp" 244 | [[inputs.snmp.table.field]] 245 | name = "panFlowDosRedIcmp6" 246 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.15" 247 | #oid = "PAN-COMMON-MIB::panFlowDosRedIcmp6" 248 | [[inputs.snmp.table.field]] 249 | name = "panFlowDosRedIp" 250 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.16" 251 | #oid = "PAN-COMMON-MIB::panFlowDosRedIp" 252 | [[inputs.snmp.table.field]] 253 | name = "panFlowDosRedTcp" 254 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.17" 255 | #oid = "PAN-COMMON-MIB::panFlowDosRedTcp" 256 | [[inputs.snmp.table.field]] 257 | name = "panFlowDosRedUdp" 258 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.18" 259 | #oid = "PAN-COMMON-MIB::panFlowDosRedUdp" 260 | [[inputs.snmp.table.field]] 261 | name = "panFlowDosBlkNumEntries" 262 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.2" 263 | #oid = "PAN-COMMON-MIB::panFlowDosBlkNumEntries" 264 | [[inputs.snmp.table.field]] 265 | name = "panFlowDosRuleAgRedAct" 266 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.20" 267 | #oid = "PAN-COMMON-MIB::panFlowDosRuleAgRedAct" 268 | [[inputs.snmp.table.field]] 269 | name = "panFlowDosRuleDeny" 270 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.22" 271 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDeny" 272 | [[inputs.snmp.table.field]] 273 | name = "panFlowDosRuleDrop" 274 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.23" 275 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDrop" 276 | [[inputs.snmp.table.field]] 277 | name = "panFlowDosRuleDropAggr" 278 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.24" 279 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropAggr" 280 | [[inputs.snmp.table.field]] 281 | name = "panFlowDosRuleDropClBlkDur" 282 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.25" 283 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClBlkDur" 284 | [[inputs.snmp.table.field]] 285 | name = "panFlowDosRuleDropClRedAct" 286 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.26" 287 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClRedAct" 288 | [[inputs.snmp.table.field]] 289 | name = "panFlowDosRuleDropClassified" 290 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.28" 291 | #oid = "PAN-COMMON-MIB::panFlowDosRuleDropClassified" 292 | [[inputs.snmp.table.field]] 293 | name = "panFlowDosSyncookieBlkDur" 294 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.29" 295 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieBlkDur" 296 | [[inputs.snmp.table.field]] 297 | name = "panFlowDosSyncookieMax" 298 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.30" 299 | #oid = "PAN-COMMON-MIB::panFlowDosSyncookieMax" 300 | [[inputs.snmp.table.field]] 301 | name = "panFlowDosClMaxSessLimit" 302 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.3" 303 | #oid = "PAN-COMMON-MIB::panFlowDosClMaxSessLimit" 304 | [[inputs.snmp.table.field]] 305 | name = "panFlowDosZoneRedAct" 306 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.31" 307 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedAct" 308 | [[inputs.snmp.table.field]] 309 | name = "panFlowDosZoneRedMax" 310 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.32" 311 | #oid = "PAN-COMMON-MIB::panFlowDosZoneRedMax" 312 | [[inputs.snmp.table.field]] 313 | name = "panFlowDosBlkSwEntries" 314 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.33" 315 | #oid = "PAN-COMMON-MIB::panFlowDosBlkSwEntries" 316 | [[inputs.snmp.table.field]] 317 | name = "panFlowDosBlkHwEntries" 318 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.34" 319 | #oid = "PAN-COMMON-MIB::panFlowDosBlkHwEntries" 320 | [[inputs.snmp.table.field]] 321 | name = "panFlowDosClSyncookieAckErr" 322 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.4" 323 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckErr" 324 | [[inputs.snmp.table.field]] 325 | name = "panFlowDosClSyncookieAckRcv" 326 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.5" 327 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieAckRcv" 328 | [[inputs.snmp.table.field]] 329 | name = "panFlowDosClSyncookieBlkDur" 330 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.6" 331 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieBlkDur" 332 | [[inputs.snmp.table.field]] 333 | name = "panFlowDosClSyncookieMax" 334 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.7" 335 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieMax" 336 | [[inputs.snmp.table.field]] 337 | name = "panFlowDosClSyncookieSent" 338 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.8" 339 | #oid = "PAN-COMMON-MIB::panFlowDosClSyncookieSent" 340 | [[inputs.snmp.table.field]] 341 | name = "panFlowMeterVsysThrottle" 342 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.8.9" 343 | #oid = "PAN-COMMON-MIB::panFlowMeterVsysThrottle" 344 | 345 | # Drops 346 | [[inputs.snmp.table]] 347 | name = "pan_drop" 348 | inherit_tags = [ "hostname" ] 349 | [[inputs.snmp.table.field]] 350 | name = "panFlowFwdL3TtlZero" 351 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.1" 352 | #oid = "PAN-COMMON-MIB::panFlowFwdL3TtlZero" 353 | [[inputs.snmp.table.field]] 354 | name = "panFlowMeterHostThrottle" 355 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.2" 356 | #oid = "PAN-COMMON-MIB::panFlowMeterHostThrottle" 357 | [[inputs.snmp.table.field]] 358 | name = "panFlowHostServiceDeny" 359 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.3" 360 | #oid = "PAN-COMMON-MIB::panFlowHostServiceDeny" 361 | [[inputs.snmp.table.field]] 362 | name = "panFlowHostServiceUnknown" 363 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.4" 364 | #oid = "PAN-COMMON-MIB::panFlowHostServiceUnknown" 365 | [[inputs.snmp.table.field]] 366 | name = "panPktAllocFailure" 367 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.5" 368 | #oid = "PAN-COMMON-MIB::panPktAllocFailure" 369 | [[inputs.snmp.table.field]] 370 | name = "panPktAllocFailureCos" 371 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.6" 372 | #oid = "PAN-COMMON-MIB::panPktAllocFailureCos" 373 | [[inputs.snmp.table.field]] 374 | name = "panSessionDiscard" 375 | oid = ".1.3.6.1.4.1.25461.2.1.2.1.19.9.7" 376 | #oid = "PAN-COMMON-MIB::panSessionDiscard" 377 | 378 | # Zones 379 | [[inputs.snmp.table]] 380 | name = "pan_zone" 381 | inherit_tags = [ "hostname" ] 382 | [[inputs.snmp.table.field]] 383 | name = "zone" 384 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.1" 385 | #oid = "PAN-COMMON-MIB::panZoneName" 386 | is_tag = true 387 | [[inputs.snmp.table.field]] 388 | name = "panZoneActiveTcpCps" 389 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.2" 390 | #oid = "PAN-COMMON-MIB::panZoneActiveTcpCps" 391 | [[inputs.snmp.table.field]] 392 | name = "panZoneActiveUdpCps" 393 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.3" 394 | #oid = "PAN-COMMON-MIB::panZoneActiveUdpCps" 395 | [[inputs.snmp.table.field]] 396 | name = "panZoneActiveOtherIpCps" 397 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.10.1.4" 398 | #oid = "PAN-COMMON-MIB::panZoneActiveOtherIpCps" 399 | 400 | # Vsys 401 | [[inputs.snmp.table]] 402 | name = "pan_vsys" 403 | inherit_tags = [ "hostname" ] 404 | [[inputs.snmp.table.field]] 405 | name = "Vsys" 406 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.2" 407 | #oid = "PAN-COMMON-MIB::panVsysName" 408 | is_tag = true 409 | [[inputs.snmp.table.field]] 410 | name = "panVsysActiveSessions" 411 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.4" 412 | #oid = "PAN-COMMON-MIB::panVsysActiveSessions" 413 | [[inputs.snmp.table.field]] 414 | name = "panVsysActiveTcpCps" 415 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.6" 416 | #oid = "PAN-COMMON-MIB::panVsysActiveTcpCps" 417 | [[inputs.snmp.table.field]] 418 | name = "panVsysActiveUdpCps" 419 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.7" 420 | #oid = "PAN-COMMON-MIB::panVsysActiveUdpCps" 421 | [[inputs.snmp.table.field]] 422 | name = "panVsysActiveOtherIpCps" 423 | oid = ".1.3.6.1.4.1.25461.2.1.2.3.9.1.8" 424 | #oid = "PAN-COMMON-MIB::panVsysActiveOtherIpCps" 425 | 426 | # Memory and buffers 427 | [[inputs.snmp.table]] 428 | name = "pan_buffers" 429 | inherit_tags = [ "hostname" ] 430 | oid = "1.3.6.1.2.1.25.2.3" 431 | [[inputs.snmp.table.field]] 432 | name = "hrStorageDescr" 433 | oid = "1.3.6.1.2.1.25.2.3.1.3" 434 | #oid = "HOST-RESOURCES-MIB::hrStorageDescr" 435 | is_tag = true -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | GNU GENERAL PUBLIC LICENSE 2 | Version 3, 29 June 2007 3 | 4 | Copyright (C) 2007 Free Software Foundation, Inc. 5 | Everyone is permitted to copy and distribute verbatim copies 6 | of this license document, but changing it is not allowed. 7 | 8 | Preamble 9 | 10 | The GNU General Public License is a free, copyleft license for 11 | software and other kinds of works. 12 | 13 | The licenses for most software and other practical works are designed 14 | to take away your freedom to share and change the works. By contrast, 15 | the GNU General Public License is intended to guarantee your freedom to 16 | share and change all versions of a program--to make sure it remains free 17 | software for all its users. We, the Free Software Foundation, use the 18 | GNU General Public License for most of our software; it applies also to 19 | any other work released this way by its authors. You can apply it to 20 | your programs, too. 21 | 22 | When we speak of free software, we are referring to freedom, not 23 | price. Our General Public Licenses are designed to make sure that you 24 | have the freedom to distribute copies of free software (and charge for 25 | them if you wish), that you receive source code or can get it if you 26 | want it, that you can change the software or use pieces of it in new 27 | free programs, and that you know you can do these things. 28 | 29 | To protect your rights, we need to prevent others from denying you 30 | these rights or asking you to surrender the rights. Therefore, you have 31 | certain responsibilities if you distribute copies of the software, or if 32 | you modify it: responsibilities to respect the freedom of others. 33 | 34 | For example, if you distribute copies of such a program, whether 35 | gratis or for a fee, you must pass on to the recipients the same 36 | freedoms that you received. You must make sure that they, too, receive 37 | or can get the source code. And you must show them these terms so they 38 | know their rights. 39 | 40 | Developers that use the GNU GPL protect your rights with two steps: 41 | (1) assert copyright on the software, and (2) offer you this License 42 | giving you legal permission to copy, distribute and/or modify it. 43 | 44 | For the developers' and authors' protection, the GPL clearly explains 45 | that there is no warranty for this free software. For both users' and 46 | authors' sake, the GPL requires that modified versions be marked as 47 | changed, so that their problems will not be attributed erroneously to 48 | authors of previous versions. 49 | 50 | Some devices are designed to deny users access to install or run 51 | modified versions of the software inside them, although the manufacturer 52 | can do so. This is fundamentally incompatible with the aim of 53 | protecting users' freedom to change the software. The systematic 54 | pattern of such abuse occurs in the area of products for individuals to 55 | use, which is precisely where it is most unacceptable. Therefore, we 56 | have designed this version of the GPL to prohibit the practice for those 57 | products. If such problems arise substantially in other domains, we 58 | stand ready to extend this provision to those domains in future versions 59 | of the GPL, as needed to protect the freedom of users. 60 | 61 | Finally, every program is threatened constantly by software patents. 62 | States should not allow patents to restrict development and use of 63 | software on general-purpose computers, but in those that do, we wish to 64 | avoid the special danger that patents applied to a free program could 65 | make it effectively proprietary. To prevent this, the GPL assures that 66 | patents cannot be used to render the program non-free. 67 | 68 | The precise terms and conditions for copying, distribution and 69 | modification follow. 70 | 71 | TERMS AND CONDITIONS 72 | 73 | 0. Definitions. 74 | 75 | "This License" refers to version 3 of the GNU General Public License. 76 | 77 | "Copyright" also means copyright-like laws that apply to other kinds of 78 | works, such as semiconductor masks. 79 | 80 | "The Program" refers to any copyrightable work licensed under this 81 | License. Each licensee is addressed as "you". "Licensees" and 82 | "recipients" may be individuals or organizations. 83 | 84 | To "modify" a work means to copy from or adapt all or part of the work 85 | in a fashion requiring copyright permission, other than the making of an 86 | exact copy. The resulting work is called a "modified version" of the 87 | earlier work or a work "based on" the earlier work. 88 | 89 | A "covered work" means either the unmodified Program or a work based 90 | on the Program. 91 | 92 | To "propagate" a work means to do anything with it that, without 93 | permission, would make you directly or secondarily liable for 94 | infringement under applicable copyright law, except executing it on a 95 | computer or modifying a private copy. Propagation includes copying, 96 | distribution (with or without modification), making available to the 97 | public, and in some countries other activities as well. 98 | 99 | To "convey" a work means any kind of propagation that enables other 100 | parties to make or receive copies. Mere interaction with a user through 101 | a computer network, with no transfer of a copy, is not conveying. 102 | 103 | An interactive user interface displays "Appropriate Legal Notices" 104 | to the extent that it includes a convenient and prominently visible 105 | feature that (1) displays an appropriate copyright notice, and (2) 106 | tells the user that there is no warranty for the work (except to the 107 | extent that warranties are provided), that licensees may convey the 108 | work under this License, and how to view a copy of this License. If 109 | the interface presents a list of user commands or options, such as a 110 | menu, a prominent item in the list meets this criterion. 111 | 112 | 1. Source Code. 113 | 114 | The "source code" for a work means the preferred form of the work 115 | for making modifications to it. "Object code" means any non-source 116 | form of a work. 117 | 118 | A "Standard Interface" means an interface that either is an official 119 | standard defined by a recognized standards body, or, in the case of 120 | interfaces specified for a particular programming language, one that 121 | is widely used among developers working in that language. 122 | 123 | The "System Libraries" of an executable work include anything, other 124 | than the work as a whole, that (a) is included in the normal form of 125 | packaging a Major Component, but which is not part of that Major 126 | Component, and (b) serves only to enable use of the work with that 127 | Major Component, or to implement a Standard Interface for which an 128 | implementation is available to the public in source code form. A 129 | "Major Component", in this context, means a major essential component 130 | (kernel, window system, and so on) of the specific operating system 131 | (if any) on which the executable work runs, or a compiler used to 132 | produce the work, or an object code interpreter used to run it. 133 | 134 | The "Corresponding Source" for a work in object code form means all 135 | the source code needed to generate, install, and (for an executable 136 | work) run the object code and to modify the work, including scripts to 137 | control those activities. However, it does not include the work's 138 | System Libraries, or general-purpose tools or generally available free 139 | programs which are used unmodified in performing those activities but 140 | which are not part of the work. For example, Corresponding Source 141 | includes interface definition files associated with source files for 142 | the work, and the source code for shared libraries and dynamically 143 | linked subprograms that the work is specifically designed to require, 144 | such as by intimate data communication or control flow between those 145 | subprograms and other parts of the work. 146 | 147 | The Corresponding Source need not include anything that users 148 | can regenerate automatically from other parts of the Corresponding 149 | Source. 150 | 151 | The Corresponding Source for a work in source code form is that 152 | same work. 153 | 154 | 2. Basic Permissions. 155 | 156 | All rights granted under this License are granted for the term of 157 | copyright on the Program, and are irrevocable provided the stated 158 | conditions are met. This License explicitly affirms your unlimited 159 | permission to run the unmodified Program. The output from running a 160 | covered work is covered by this License only if the output, given its 161 | content, constitutes a covered work. This License acknowledges your 162 | rights of fair use or other equivalent, as provided by copyright law. 163 | 164 | You may make, run and propagate covered works that you do not 165 | convey, without conditions so long as your license otherwise remains 166 | in force. You may convey covered works to others for the sole purpose 167 | of having them make modifications exclusively for you, or provide you 168 | with facilities for running those works, provided that you comply with 169 | the terms of this License in conveying all material for which you do 170 | not control copyright. Those thus making or running the covered works 171 | for you must do so exclusively on your behalf, under your direction 172 | and control, on terms that prohibit them from making any copies of 173 | your copyrighted material outside their relationship with you. 174 | 175 | Conveying under any other circumstances is permitted solely under 176 | the conditions stated below. Sublicensing is not allowed; section 10 177 | makes it unnecessary. 178 | 179 | 3. Protecting Users' Legal Rights From Anti-Circumvention Law. 180 | 181 | No covered work shall be deemed part of an effective technological 182 | measure under any applicable law fulfilling obligations under article 183 | 11 of the WIPO copyright treaty adopted on 20 December 1996, or 184 | similar laws prohibiting or restricting circumvention of such 185 | measures. 186 | 187 | When you convey a covered work, you waive any legal power to forbid 188 | circumvention of technological measures to the extent such circumvention 189 | is effected by exercising rights under this License with respect to 190 | the covered work, and you disclaim any intention to limit operation or 191 | modification of the work as a means of enforcing, against the work's 192 | users, your or third parties' legal rights to forbid circumvention of 193 | technological measures. 194 | 195 | 4. Conveying Verbatim Copies. 196 | 197 | You may convey verbatim copies of the Program's source code as you 198 | receive it, in any medium, provided that you conspicuously and 199 | appropriately publish on each copy an appropriate copyright notice; 200 | keep intact all notices stating that this License and any 201 | non-permissive terms added in accord with section 7 apply to the code; 202 | keep intact all notices of the absence of any warranty; and give all 203 | recipients a copy of this License along with the Program. 204 | 205 | You may charge any price or no price for each copy that you convey, 206 | and you may offer support or warranty protection for a fee. 207 | 208 | 5. Conveying Modified Source Versions. 209 | 210 | You may convey a work based on the Program, or the modifications to 211 | produce it from the Program, in the form of source code under the 212 | terms of section 4, provided that you also meet all of these conditions: 213 | 214 | a) The work must carry prominent notices stating that you modified 215 | it, and giving a relevant date. 216 | 217 | b) The work must carry prominent notices stating that it is 218 | released under this License and any conditions added under section 219 | 7. This requirement modifies the requirement in section 4 to 220 | "keep intact all notices". 221 | 222 | c) You must license the entire work, as a whole, under this 223 | License to anyone who comes into possession of a copy. This 224 | License will therefore apply, along with any applicable section 7 225 | additional terms, to the whole of the work, and all its parts, 226 | regardless of how they are packaged. This License gives no 227 | permission to license the work in any other way, but it does not 228 | invalidate such permission if you have separately received it. 229 | 230 | d) If the work has interactive user interfaces, each must display 231 | Appropriate Legal Notices; however, if the Program has interactive 232 | interfaces that do not display Appropriate Legal Notices, your 233 | work need not make them do so. 234 | 235 | A compilation of a covered work with other separate and independent 236 | works, which are not by their nature extensions of the covered work, 237 | and which are not combined with it such as to form a larger program, 238 | in or on a volume of a storage or distribution medium, is called an 239 | "aggregate" if the compilation and its resulting copyright are not 240 | used to limit the access or legal rights of the compilation's users 241 | beyond what the individual works permit. Inclusion of a covered work 242 | in an aggregate does not cause this License to apply to the other 243 | parts of the aggregate. 244 | 245 | 6. Conveying Non-Source Forms. 246 | 247 | You may convey a covered work in object code form under the terms 248 | of sections 4 and 5, provided that you also convey the 249 | machine-readable Corresponding Source under the terms of this License, 250 | in one of these ways: 251 | 252 | a) Convey the object code in, or embodied in, a physical product 253 | (including a physical distribution medium), accompanied by the 254 | Corresponding Source fixed on a durable physical medium 255 | customarily used for software interchange. 256 | 257 | b) Convey the object code in, or embodied in, a physical product 258 | (including a physical distribution medium), accompanied by a 259 | written offer, valid for at least three years and valid for as 260 | long as you offer spare parts or customer support for that product 261 | model, to give anyone who possesses the object code either (1) a 262 | copy of the Corresponding Source for all the software in the 263 | product that is covered by this License, on a durable physical 264 | medium customarily used for software interchange, for a price no 265 | more than your reasonable cost of physically performing this 266 | conveying of source, or (2) access to copy the 267 | Corresponding Source from a network server at no charge. 268 | 269 | c) Convey individual copies of the object code with a copy of the 270 | written offer to provide the Corresponding Source. This 271 | alternative is allowed only occasionally and noncommercially, and 272 | only if you received the object code with such an offer, in accord 273 | with subsection 6b. 274 | 275 | d) Convey the object code by offering access from a designated 276 | place (gratis or for a charge), and offer equivalent access to the 277 | Corresponding Source in the same way through the same place at no 278 | further charge. You need not require recipients to copy the 279 | Corresponding Source along with the object code. If the place to 280 | copy the object code is a network server, the Corresponding Source 281 | may be on a different server (operated by you or a third party) 282 | that supports equivalent copying facilities, provided you maintain 283 | clear directions next to the object code saying where to find the 284 | Corresponding Source. Regardless of what server hosts the 285 | Corresponding Source, you remain obligated to ensure that it is 286 | available for as long as needed to satisfy these requirements. 287 | 288 | e) Convey the object code using peer-to-peer transmission, provided 289 | you inform other peers where the object code and Corresponding 290 | Source of the work are being offered to the general public at no 291 | charge under subsection 6d. 292 | 293 | A separable portion of the object code, whose source code is excluded 294 | from the Corresponding Source as a System Library, need not be 295 | included in conveying the object code work. 296 | 297 | A "User Product" is either (1) a "consumer product", which means any 298 | tangible personal property which is normally used for personal, family, 299 | or household purposes, or (2) anything designed or sold for incorporation 300 | into a dwelling. In determining whether a product is a consumer product, 301 | doubtful cases shall be resolved in favor of coverage. For a particular 302 | product received by a particular user, "normally used" refers to a 303 | typical or common use of that class of product, regardless of the status 304 | of the particular user or of the way in which the particular user 305 | actually uses, or expects or is expected to use, the product. A product 306 | is a consumer product regardless of whether the product has substantial 307 | commercial, industrial or non-consumer uses, unless such uses represent 308 | the only significant mode of use of the product. 309 | 310 | "Installation Information" for a User Product means any methods, 311 | procedures, authorization keys, or other information required to install 312 | and execute modified versions of a covered work in that User Product from 313 | a modified version of its Corresponding Source. The information must 314 | suffice to ensure that the continued functioning of the modified object 315 | code is in no case prevented or interfered with solely because 316 | modification has been made. 317 | 318 | If you convey an object code work under this section in, or with, or 319 | specifically for use in, a User Product, and the conveying occurs as 320 | part of a transaction in which the right of possession and use of the 321 | User Product is transferred to the recipient in perpetuity or for a 322 | fixed term (regardless of how the transaction is characterized), the 323 | Corresponding Source conveyed under this section must be accompanied 324 | by the Installation Information. But this requirement does not apply 325 | if neither you nor any third party retains the ability to install 326 | modified object code on the User Product (for example, the work has 327 | been installed in ROM). 328 | 329 | The requirement to provide Installation Information does not include a 330 | requirement to continue to provide support service, warranty, or updates 331 | for a work that has been modified or installed by the recipient, or for 332 | the User Product in which it has been modified or installed. Access to a 333 | network may be denied when the modification itself materially and 334 | adversely affects the operation of the network or violates the rules and 335 | protocols for communication across the network. 336 | 337 | Corresponding Source conveyed, and Installation Information provided, 338 | in accord with this section must be in a format that is publicly 339 | documented (and with an implementation available to the public in 340 | source code form), and must require no special password or key for 341 | unpacking, reading or copying. 342 | 343 | 7. Additional Terms. 344 | 345 | "Additional permissions" are terms that supplement the terms of this 346 | License by making exceptions from one or more of its conditions. 347 | Additional permissions that are applicable to the entire Program shall 348 | be treated as though they were included in this License, to the extent 349 | that they are valid under applicable law. If additional permissions 350 | apply only to part of the Program, that part may be used separately 351 | under those permissions, but the entire Program remains governed by 352 | this License without regard to the additional permissions. 353 | 354 | When you convey a copy of a covered work, you may at your option 355 | remove any additional permissions from that copy, or from any part of 356 | it. (Additional permissions may be written to require their own 357 | removal in certain cases when you modify the work.) You may place 358 | additional permissions on material, added by you to a covered work, 359 | for which you have or can give appropriate copyright permission. 360 | 361 | Notwithstanding any other provision of this License, for material you 362 | add to a covered work, you may (if authorized by the copyright holders of 363 | that material) supplement the terms of this License with terms: 364 | 365 | a) Disclaiming warranty or limiting liability differently from the 366 | terms of sections 15 and 16 of this License; or 367 | 368 | b) Requiring preservation of specified reasonable legal notices or 369 | author attributions in that material or in the Appropriate Legal 370 | Notices displayed by works containing it; or 371 | 372 | c) Prohibiting misrepresentation of the origin of that material, or 373 | requiring that modified versions of such material be marked in 374 | reasonable ways as different from the original version; or 375 | 376 | d) Limiting the use for publicity purposes of names of licensors or 377 | authors of the material; or 378 | 379 | e) Declining to grant rights under trademark law for use of some 380 | trade names, trademarks, or service marks; or 381 | 382 | f) Requiring indemnification of licensors and authors of that 383 | material by anyone who conveys the material (or modified versions of 384 | it) with contractual assumptions of liability to the recipient, for 385 | any liability that these contractual assumptions directly impose on 386 | those licensors and authors. 387 | 388 | All other non-permissive additional terms are considered "further 389 | restrictions" within the meaning of section 10. If the Program as you 390 | received it, or any part of it, contains a notice stating that it is 391 | governed by this License along with a term that is a further 392 | restriction, you may remove that term. If a license document contains 393 | a further restriction but permits relicensing or conveying under this 394 | License, you may add to a covered work material governed by the terms 395 | of that license document, provided that the further restriction does 396 | not survive such relicensing or conveying. 397 | 398 | If you add terms to a covered work in accord with this section, you 399 | must place, in the relevant source files, a statement of the 400 | additional terms that apply to those files, or a notice indicating 401 | where to find the applicable terms. 402 | 403 | Additional terms, permissive or non-permissive, may be stated in the 404 | form of a separately written license, or stated as exceptions; 405 | the above requirements apply either way. 406 | 407 | 8. Termination. 408 | 409 | You may not propagate or modify a covered work except as expressly 410 | provided under this License. Any attempt otherwise to propagate or 411 | modify it is void, and will automatically terminate your rights under 412 | this License (including any patent licenses granted under the third 413 | paragraph of section 11). 414 | 415 | However, if you cease all violation of this License, then your 416 | license from a particular copyright holder is reinstated (a) 417 | provisionally, unless and until the copyright holder explicitly and 418 | finally terminates your license, and (b) permanently, if the copyright 419 | holder fails to notify you of the violation by some reasonable means 420 | prior to 60 days after the cessation. 421 | 422 | Moreover, your license from a particular copyright holder is 423 | reinstated permanently if the copyright holder notifies you of the 424 | violation by some reasonable means, this is the first time you have 425 | received notice of violation of this License (for any work) from that 426 | copyright holder, and you cure the violation prior to 30 days after 427 | your receipt of the notice. 428 | 429 | Termination of your rights under this section does not terminate the 430 | licenses of parties who have received copies or rights from you under 431 | this License. If your rights have been terminated and not permanently 432 | reinstated, you do not qualify to receive new licenses for the same 433 | material under section 10. 434 | 435 | 9. Acceptance Not Required for Having Copies. 436 | 437 | You are not required to accept this License in order to receive or 438 | run a copy of the Program. Ancillary propagation of a covered work 439 | occurring solely as a consequence of using peer-to-peer transmission 440 | to receive a copy likewise does not require acceptance. However, 441 | nothing other than this License grants you permission to propagate or 442 | modify any covered work. These actions infringe copyright if you do 443 | not accept this License. Therefore, by modifying or propagating a 444 | covered work, you indicate your acceptance of this License to do so. 445 | 446 | 10. Automatic Licensing of Downstream Recipients. 447 | 448 | Each time you convey a covered work, the recipient automatically 449 | receives a license from the original licensors, to run, modify and 450 | propagate that work, subject to this License. You are not responsible 451 | for enforcing compliance by third parties with this License. 452 | 453 | An "entity transaction" is a transaction transferring control of an 454 | organization, or substantially all assets of one, or subdividing an 455 | organization, or merging organizations. If propagation of a covered 456 | work results from an entity transaction, each party to that 457 | transaction who receives a copy of the work also receives whatever 458 | licenses to the work the party's predecessor in interest had or could 459 | give under the previous paragraph, plus a right to possession of the 460 | Corresponding Source of the work from the predecessor in interest, if 461 | the predecessor has it or can get it with reasonable efforts. 462 | 463 | You may not impose any further restrictions on the exercise of the 464 | rights granted or affirmed under this License. For example, you may 465 | not impose a license fee, royalty, or other charge for exercise of 466 | rights granted under this License, and you may not initiate litigation 467 | (including a cross-claim or counterclaim in a lawsuit) alleging that 468 | any patent claim is infringed by making, using, selling, offering for 469 | sale, or importing the Program or any portion of it. 470 | 471 | 11. Patents. 472 | 473 | A "contributor" is a copyright holder who authorizes use under this 474 | License of the Program or a work on which the Program is based. The 475 | work thus licensed is called the contributor's "contributor version". 476 | 477 | A contributor's "essential patent claims" are all patent claims 478 | owned or controlled by the contributor, whether already acquired or 479 | hereafter acquired, that would be infringed by some manner, permitted 480 | by this License, of making, using, or selling its contributor version, 481 | but do not include claims that would be infringed only as a 482 | consequence of further modification of the contributor version. For 483 | purposes of this definition, "control" includes the right to grant 484 | patent sublicenses in a manner consistent with the requirements of 485 | this License. 486 | 487 | Each contributor grants you a non-exclusive, worldwide, royalty-free 488 | patent license under the contributor's essential patent claims, to 489 | make, use, sell, offer for sale, import and otherwise run, modify and 490 | propagate the contents of its contributor version. 491 | 492 | In the following three paragraphs, a "patent license" is any express 493 | agreement or commitment, however denominated, not to enforce a patent 494 | (such as an express permission to practice a patent or covenant not to 495 | sue for patent infringement). To "grant" such a patent license to a 496 | party means to make such an agreement or commitment not to enforce a 497 | patent against the party. 498 | 499 | If you convey a covered work, knowingly relying on a patent license, 500 | and the Corresponding Source of the work is not available for anyone 501 | to copy, free of charge and under the terms of this License, through a 502 | publicly available network server or other readily accessible means, 503 | then you must either (1) cause the Corresponding Source to be so 504 | available, or (2) arrange to deprive yourself of the benefit of the 505 | patent license for this particular work, or (3) arrange, in a manner 506 | consistent with the requirements of this License, to extend the patent 507 | license to downstream recipients. "Knowingly relying" means you have 508 | actual knowledge that, but for the patent license, your conveying the 509 | covered work in a country, or your recipient's use of the covered work 510 | in a country, would infringe one or more identifiable patents in that 511 | country that you have reason to believe are valid. 512 | 513 | If, pursuant to or in connection with a single transaction or 514 | arrangement, you convey, or propagate by procuring conveyance of, a 515 | covered work, and grant a patent license to some of the parties 516 | receiving the covered work authorizing them to use, propagate, modify 517 | or convey a specific copy of the covered work, then the patent license 518 | you grant is automatically extended to all recipients of the covered 519 | work and works based on it. 520 | 521 | A patent license is "discriminatory" if it does not include within 522 | the scope of its coverage, prohibits the exercise of, or is 523 | conditioned on the non-exercise of one or more of the rights that are 524 | specifically granted under this License. You may not convey a covered 525 | work if you are a party to an arrangement with a third party that is 526 | in the business of distributing software, under which you make payment 527 | to the third party based on the extent of your activity of conveying 528 | the work, and under which the third party grants, to any of the 529 | parties who would receive the covered work from you, a discriminatory 530 | patent license (a) in connection with copies of the covered work 531 | conveyed by you (or copies made from those copies), or (b) primarily 532 | for and in connection with specific products or compilations that 533 | contain the covered work, unless you entered into that arrangement, 534 | or that patent license was granted, prior to 28 March 2007. 535 | 536 | Nothing in this License shall be construed as excluding or limiting 537 | any implied license or other defenses to infringement that may 538 | otherwise be available to you under applicable patent law. 539 | 540 | 12. No Surrender of Others' Freedom. 541 | 542 | If conditions are imposed on you (whether by court order, agreement or 543 | otherwise) that contradict the conditions of this License, they do not 544 | excuse you from the conditions of this License. If you cannot convey a 545 | covered work so as to satisfy simultaneously your obligations under this 546 | License and any other pertinent obligations, then as a consequence you may 547 | not convey it at all. For example, if you agree to terms that obligate you 548 | to collect a royalty for further conveying from those to whom you convey 549 | the Program, the only way you could satisfy both those terms and this 550 | License would be to refrain entirely from conveying the Program. 551 | 552 | 13. Use with the GNU Affero General Public License. 553 | 554 | Notwithstanding any other provision of this License, you have 555 | permission to link or combine any covered work with a work licensed 556 | under version 3 of the GNU Affero General Public License into a single 557 | combined work, and to convey the resulting work. The terms of this 558 | License will continue to apply to the part which is the covered work, 559 | but the special requirements of the GNU Affero General Public License, 560 | section 13, concerning interaction through a network will apply to the 561 | combination as such. 562 | 563 | 14. Revised Versions of this License. 564 | 565 | The Free Software Foundation may publish revised and/or new versions of 566 | the GNU General Public License from time to time. Such new versions will 567 | be similar in spirit to the present version, but may differ in detail to 568 | address new problems or concerns. 569 | 570 | Each version is given a distinguishing version number. If the 571 | Program specifies that a certain numbered version of the GNU General 572 | Public License "or any later version" applies to it, you have the 573 | option of following the terms and conditions either of that numbered 574 | version or of any later version published by the Free Software 575 | Foundation. If the Program does not specify a version number of the 576 | GNU General Public License, you may choose any version ever published 577 | by the Free Software Foundation. 578 | 579 | If the Program specifies that a proxy can decide which future 580 | versions of the GNU General Public License can be used, that proxy's 581 | public statement of acceptance of a version permanently authorizes you 582 | to choose that version for the Program. 583 | 584 | Later license versions may give you additional or different 585 | permissions. However, no additional obligations are imposed on any 586 | author or copyright holder as a result of your choosing to follow a 587 | later version. 588 | 589 | 15. Disclaimer of Warranty. 590 | 591 | THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY 592 | APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT 593 | HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY 594 | OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, 595 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 596 | PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM 597 | IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF 598 | ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 599 | 600 | 16. Limitation of Liability. 601 | 602 | IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING 603 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS 604 | THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY 605 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE 606 | USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF 607 | DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD 608 | PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), 609 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF 610 | SUCH DAMAGES. 611 | 612 | 17. Interpretation of Sections 15 and 16. 613 | 614 | If the disclaimer of warranty and limitation of liability provided 615 | above cannot be given local legal effect according to their terms, 616 | reviewing courts shall apply local law that most closely approximates 617 | an absolute waiver of all civil liability in connection with the 618 | Program, unless a warranty or assumption of liability accompanies a 619 | copy of the Program in return for a fee. 620 | 621 | END OF TERMS AND CONDITIONS 622 | 623 | How to Apply These Terms to Your New Programs 624 | 625 | If you develop a new program, and you want it to be of the greatest 626 | possible use to the public, the best way to achieve this is to make it 627 | free software which everyone can redistribute and change under these terms. 628 | 629 | To do so, attach the following notices to the program. It is safest 630 | to attach them to the start of each source file to most effectively 631 | state the exclusion of warranty; and each file should have at least 632 | the "copyright" line and a pointer to where the full notice is found. 633 | 634 | 635 | Copyright (C) 636 | 637 | This program is free software: you can redistribute it and/or modify 638 | it under the terms of the GNU General Public License as published by 639 | the Free Software Foundation, either version 3 of the License, or 640 | (at your option) any later version. 641 | 642 | This program is distributed in the hope that it will be useful, 643 | but WITHOUT ANY WARRANTY; without even the implied warranty of 644 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 645 | GNU General Public License for more details. 646 | 647 | You should have received a copy of the GNU General Public License 648 | along with this program. If not, see . 649 | 650 | Also add information on how to contact you by electronic and paper mail. 651 | 652 | If the program does terminal interaction, make it output a short 653 | notice like this when it starts in an interactive mode: 654 | 655 | Copyright (C) 656 | This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. 657 | This is free software, and you are welcome to redistribute it 658 | under certain conditions; type `show c' for details. 659 | 660 | The hypothetical commands `show w' and `show c' should show the appropriate 661 | parts of the General Public License. Of course, your program's commands 662 | might be different; for a GUI interface, you would use an "about box". 663 | 664 | You should also get your employer (if you work as a programmer) or school, 665 | if any, to sign a "copyright disclaimer" for the program, if necessary. 666 | For more information on this, and how to apply and follow the GNU GPL, see 667 | . 668 | 669 | The GNU General Public License does not permit incorporating your program 670 | into proprietary programs. If your program is a subroutine library, you 671 | may consider it more useful to permit linking proprietary applications with 672 | the library. If this is what you want to do, use the GNU Lesser General 673 | Public License instead of this License. But first, please read 674 | . 675 | -------------------------------------------------------------------------------- /PAN-COMMON-MIB.my: -------------------------------------------------------------------------------- 1 | -- *********************************************** 2 | -- PAN-COMMON-MIB.my 3 | -- 4 | -- MIB for the common MIB objects implemented by all 5 | -- Palo Alto devices. 6 | -- *********************************************** 7 | 8 | PAN-COMMON-MIB DEFINITIONS ::= BEGIN 9 | 10 | IMPORTS 11 | MODULE-IDENTITY, OBJECT-IDENTITY, 12 | OBJECT-TYPE, NOTIFICATION-TYPE, 13 | Integer32 14 | FROM SNMPv2-SMI 15 | -- MODULE-COMPLIANCE, OBJECT-GROUP 16 | -- FROM SNMPv2-CONF 17 | TEXTUAL-CONVENTION 18 | FROM SNMPv2-TC 19 | DisplayString, TruthValue, TimeStamp 20 | FROM SNMPv2-TC 21 | TcChassisType 22 | FROM PAN-GLOBAL-TC 23 | panModules, panCommonMib 24 | FROM PAN-GLOBAL-REG; 25 | 26 | panCommonMibModule MODULE-IDENTITY 27 | LAST-UPDATED "201409040000Z" 28 | ORGANIZATION "Palo Alto Networks" 29 | CONTACT-INFO " 30 | Customer Support 31 | Palo Alto Networks 32 | 4401 Great America Pkwy 33 | Santa Clara, CA 95054-1211 34 | 35 | +1 866-898-9087 36 | support at paloaltonetworks dot com" 37 | 38 | DESCRIPTION " 39 | A MIB module containing definitions of managed objects 40 | implemented by all Palo Alto Networks' products." 41 | REVISION "201406300000Z" 42 | DESCRIPTION " 43 | Rev 2.3 44 | Added entries for Log Collector." 45 | REVISION "201409040000Z" 46 | DESCRIPTION " 47 | Rev 2.2 48 | Added entries for Wildfire content versions. 49 | Added entry for new platform PA 3060." 50 | REVISION "201403060000Z" 51 | DESCRIPTION " 52 | Rev 2.1 53 | Fixed a capitalization error with PanVsysEntry." 54 | REVISION "201303010000Z" 55 | DESCRIPTION " 56 | Rev 2.0 57 | Updated with panGlobalProtect and panVsysTable." 58 | REVISION "201102091610Z" 59 | DESCRIPTION " 60 | Rev 1.0 61 | Initial version of MIB module PAN-COMMON-MIB." 62 | 63 | ::= { panModules 3 } 64 | 65 | FloatValue ::= TEXTUAL-CONVENTION 66 | DISPLAY-HINT "d-2" 67 | STATUS current 68 | DESCRIPTION 69 | " This data type is used to represent Float values." 70 | SYNTAX OCTET STRING (SIZE(0..64)) 71 | 72 | panCommonConfMib OBJECT-IDENTITY 73 | STATUS current 74 | DESCRIPTION " 75 | Sub-tree for MIB conformance statements." 76 | ::= { panCommonMib 1 } 77 | 78 | panCommonObjs OBJECT-IDENTITY 79 | STATUS current 80 | DESCRIPTION " 81 | Sub-tree for common MIB objects." 82 | ::= { panCommonMib 2 } 83 | 84 | panCommonEvents OBJECT-IDENTITY 85 | STATUS current 86 | DESCRIPTION " 87 | Sub-tree for common MIB events." 88 | ::= { panCommonMib 3 } 89 | 90 | -- Top level groups 91 | 92 | panSys OBJECT-IDENTITY 93 | STATUS current 94 | DESCRIPTION " 95 | Sub-tree for common system objects." 96 | ::= { panCommonObjs 1 } 97 | 98 | panChassis OBJECT-IDENTITY 99 | STATUS current 100 | DESCRIPTION " 101 | Sub-tree for common chassis information." 102 | ::= { panCommonObjs 2 } 103 | 104 | panSession OBJECT-IDENTITY 105 | STATUS current 106 | DESCRIPTION " 107 | Sub-tree for common session information." 108 | ::= { panCommonObjs 3 } 109 | 110 | panMgmt OBJECT-IDENTITY 111 | STATUS current 112 | DESCRIPTION " 113 | Sub-tree for common Management plane information." 114 | ::= { panCommonObjs 4 } 115 | 116 | panGlobalProtect OBJECT-IDENTITY 117 | STATUS current 118 | DESCRIPTION " 119 | Sub-tree for common GlobalProtect information." 120 | ::= { panCommonObjs 5 } 121 | 122 | panLogCollector OBJECT-IDENTITY 123 | STATUS current 124 | DESCRIPTION " 125 | Sub-tree for common Log Collector information." 126 | ::= { panCommonObjs 6 } 127 | 128 | panDeviceLogging OBJECT-IDENTITY 129 | STATUS current 130 | DESCRIPTION " 131 | Sub-tree for common Device information." 132 | ::= { panCommonObjs 7 } 133 | 134 | panSSLBroker OBJECT-IDENTITY 135 | STATUS current 136 | DESCRIPTION " 137 | Sub-tree to capture ssl broker statistics." 138 | ::= { panCommonObjs 8 } 139 | 140 | panGlobalCounters OBJECT-IDENTITY 141 | STATUS current 142 | DESCRIPTION " 143 | Sub-tree for common Global counters." 144 | ::= { panSys 19 } 145 | 146 | ---------------------------------------------------------------------- 147 | -- System objects 148 | 149 | panSysSwVersion OBJECT-TYPE 150 | SYNTAX DisplayString 151 | MAX-ACCESS read-only 152 | STATUS current 153 | DESCRIPTION 154 | "Full software version. The first two components of the full 155 | version are the major and minor versions. The third component 156 | indicates the maintenance release number and the fourth, 157 | the build number." 158 | ::= { panSys 1 } 159 | 160 | panSysHwVersion OBJECT-TYPE 161 | SYNTAX DisplayString 162 | MAX-ACCESS read-only 163 | STATUS current 164 | DESCRIPTION 165 | "Hardware version of the unit." 166 | ::= { panSys 2 } 167 | 168 | panSysSerialNumber OBJECT-TYPE 169 | SYNTAX DisplayString 170 | MAX-ACCESS read-only 171 | STATUS current 172 | DESCRIPTION 173 | "The serial number of the unit. If not available, 174 | an empty string is returned." 175 | ::= { panSys 3 } 176 | 177 | panSysTimeZoneOffset OBJECT-TYPE 178 | SYNTAX Integer32 179 | MAX-ACCESS read-only 180 | STATUS current 181 | DESCRIPTION 182 | "The offset in seconds from UTC of the system's time zone. 183 | Values are negative for locations west of UTC and positive 184 | for locations east of UTC." 185 | ::= { panSys 4 } 186 | 187 | panSysDaylightSaving OBJECT-TYPE 188 | SYNTAX TruthValue 189 | MAX-ACCESS read-only 190 | STATUS current 191 | DESCRIPTION 192 | "Whether daylight savings are in currently in effect for the 193 | system's time zone." 194 | ::= { panSys 5 } 195 | 196 | panSysVpnClientVersion OBJECT-TYPE 197 | SYNTAX DisplayString 198 | MAX-ACCESS read-only 199 | STATUS current 200 | DESCRIPTION 201 | "Currently installed VPN client package version. If 202 | package is not installed, 0.0.0 is returned." 203 | ::= { panSys 6 } 204 | 205 | panSysAppVersion OBJECT-TYPE 206 | SYNTAX DisplayString 207 | MAX-ACCESS read-only 208 | STATUS current 209 | DESCRIPTION 210 | "Currently installed application definition version. If 211 | no application definition is found, 0 is returned." 212 | ::= { panSys 7 } 213 | 214 | panSysAvVersion OBJECT-TYPE 215 | SYNTAX DisplayString 216 | MAX-ACCESS read-only 217 | STATUS current 218 | DESCRIPTION 219 | "Currently installed antivirus version. If no antivirus 220 | is found, 0 is returned." 221 | ::= { panSys 8 } 222 | 223 | panSysThreatVersion OBJECT-TYPE 224 | SYNTAX DisplayString 225 | MAX-ACCESS read-only 226 | STATUS current 227 | DESCRIPTION 228 | "Currently installed threat definition version. If no 229 | threat definition is found, 0 is returned." 230 | ::= { panSys 9 } 231 | 232 | panSysUrlFilteringVersion OBJECT-TYPE 233 | SYNTAX DisplayString 234 | MAX-ACCESS read-only 235 | STATUS current 236 | DESCRIPTION 237 | "Currently installed URL filtering version. If no URL 238 | filtering is installed, 0 is returned." 239 | ::= { panSys 10 } 240 | 241 | panSysHAState OBJECT-TYPE 242 | SYNTAX DisplayString 243 | MAX-ACCESS read-only 244 | STATUS current 245 | DESCRIPTION 246 | "Current high-availability state." 247 | ::= { panSys 11 } 248 | 249 | panSysHAPeerState OBJECT-TYPE 250 | SYNTAX DisplayString 251 | MAX-ACCESS read-only 252 | STATUS current 253 | DESCRIPTION 254 | "Current peer high-availability state." 255 | ::= { panSys 12 } 256 | 257 | panSysHAMode OBJECT-TYPE 258 | SYNTAX DisplayString 259 | MAX-ACCESS read-only 260 | STATUS current 261 | DESCRIPTION 262 | "Current high-availability mode (disabled, 263 | active-passive, or active-active)." 264 | ::= { panSys 13 } 265 | 266 | panSysUrlFilteringDatabase OBJECT-TYPE 267 | SYNTAX DisplayString 268 | MAX-ACCESS read-only 269 | STATUS current 270 | DESCRIPTION 271 | "Current installed URL filtering database 272 | (surfcontrol, brightcloud, etc)" 273 | ::= { panSys 14 } 274 | 275 | panSysGlobalProtectClientVersion OBJECT-TYPE 276 | SYNTAX DisplayString 277 | MAX-ACCESS read-only 278 | STATUS current 279 | DESCRIPTION 280 | "Currently installed global-protect client package version. 281 | If package is not installed, 0.0.0 is returned." 282 | ::= { panSys 15 } 283 | 284 | panSysOpswatDatafileVersion OBJECT-TYPE 285 | SYNTAX DisplayString 286 | MAX-ACCESS read-only 287 | STATUS current 288 | DESCRIPTION 289 | "Currently installed opswat database version. 290 | If package is not installed, 0 is returned." 291 | ::= { panSys 16 } 292 | 293 | panSysWildfireVersion OBJECT-TYPE 294 | SYNTAX DisplayString 295 | MAX-ACCESS read-only 296 | STATUS current 297 | DESCRIPTION 298 | "Currently installed wildfire content version. If no wildfire content 299 | is found, 0 is returned." 300 | ::= { panSys 17 } 301 | 302 | panSysWildfirePrivateCloudVersion OBJECT-TYPE 303 | SYNTAX DisplayString 304 | MAX-ACCESS read-only 305 | STATUS current 306 | DESCRIPTION 307 | "Currently installed wildfire private cloud content version. If no wpc 308 | is found, 0 is returned." 309 | ::= { panSys 18 } 310 | 311 | panSysAppReleaseDate OBJECT-TYPE 312 | SYNTAX DisplayString 313 | MAX-ACCESS read-only 314 | STATUS current 315 | DESCRIPTION 316 | "Currently installed application definition release date. If 317 | no release date is found, unknown is returned." 318 | ::= { panSys 20 } 319 | 320 | panSysThreatReleaseDate OBJECT-TYPE 321 | SYNTAX DisplayString 322 | MAX-ACCESS read-only 323 | STATUS current 324 | DESCRIPTION 325 | "Currently installed threat release date. If 326 | no release date is found, unknown is returned." 327 | ::= { panSys 21 } 328 | 329 | panSysAvReleaseDate OBJECT-TYPE 330 | SYNTAX DisplayString 331 | MAX-ACCESS read-only 332 | STATUS current 333 | DESCRIPTION 334 | "Currently installed antivirus release date. If 335 | no release date is found, unknown is returned." 336 | ::= { panSys 22 } 337 | 338 | panSysWfReleaseDate OBJECT-TYPE 339 | SYNTAX DisplayString 340 | MAX-ACCESS read-only 341 | STATUS current 342 | DESCRIPTION 343 | "Currently installed WildFire release date. If 344 | no release date is found, unknown is returned." 345 | ::= { panSys 23 } 346 | 347 | ---------------------------------------------------------------------- 348 | -- Chassis 349 | 350 | panChassisType OBJECT-TYPE 351 | SYNTAX DisplayString 352 | MAX-ACCESS read-only 353 | STATUS current 354 | DESCRIPTION 355 | "Chassis type for this Palo Alto device." 356 | ::= { panChassis 1 } 357 | 358 | panMSeriesMode OBJECT-TYPE 359 | SYNTAX DisplayString 360 | MAX-ACCESS read-only 361 | STATUS current 362 | DESCRIPTION 363 | "Series Mode for this Palo Alto device." 364 | ::= { panChassis 2 } 365 | 366 | 367 | ---------------------------------------------------------------------- 368 | -- Session 369 | 370 | panSessionUtilization OBJECT-TYPE 371 | SYNTAX Integer32 372 | MAX-ACCESS read-only 373 | STATUS current 374 | DESCRIPTION 375 | "Session table utilization percentage. Values should 376 | be between 0 and 100." 377 | ::= { panSession 1 } 378 | 379 | panSessionMax OBJECT-TYPE 380 | SYNTAX Integer32 381 | MAX-ACCESS read-only 382 | STATUS current 383 | DESCRIPTION 384 | "Total number of sessions supported." 385 | ::= { panSession 2 } 386 | 387 | panSessionActive OBJECT-TYPE 388 | SYNTAX Integer32 389 | MAX-ACCESS read-only 390 | STATUS current 391 | DESCRIPTION 392 | "Total number of active sessions." 393 | ::= { panSession 3 } 394 | 395 | panSessionActiveTcp OBJECT-TYPE 396 | SYNTAX Integer32 397 | MAX-ACCESS read-only 398 | STATUS current 399 | DESCRIPTION 400 | "Total number of active TCP sessions." 401 | ::= { panSession 4 } 402 | 403 | panSessionActiveUdp OBJECT-TYPE 404 | SYNTAX Integer32 405 | MAX-ACCESS read-only 406 | STATUS current 407 | DESCRIPTION 408 | "Total number of active UDP sessions." 409 | ::= { panSession 5 } 410 | 411 | panSessionActiveICMP OBJECT-TYPE 412 | SYNTAX Integer32 413 | MAX-ACCESS read-only 414 | STATUS current 415 | DESCRIPTION 416 | "Total number of active ICMP sessions." 417 | ::= { panSession 6 } 418 | 419 | panSessionActiveSslProxy OBJECT-TYPE 420 | SYNTAX Integer32 421 | MAX-ACCESS read-only 422 | STATUS current 423 | DESCRIPTION 424 | "Total number of active SSL proxy sessions." 425 | ::= { panSession 7 } 426 | 427 | panSessionSslProxyUtilization OBJECT-TYPE 428 | SYNTAX Integer32 429 | MAX-ACCESS read-only 430 | STATUS current 431 | DESCRIPTION 432 | "SSL proxy Session utilization percentage. Values should 433 | be between 0 and 100." 434 | ::= { panSession 8 } 435 | 436 | panVsysTable OBJECT-TYPE 437 | SYNTAX SEQUENCE OF PanVsysEntry 438 | MAX-ACCESS not-accessible 439 | STATUS current 440 | DESCRIPTION 441 | "VSYS table" 442 | ::= { panSession 9 } 443 | 444 | panZoneTable OBJECT-TYPE 445 | SYNTAX SEQUENCE OF PanZoneEntry 446 | MAX-ACCESS not-accessible 447 | STATUS current 448 | DESCRIPTION " 449 | Sub-tree for the current active connectionsPerSecond (CPS) values 450 | for each zone present." 451 | ::= { panSession 10 } 452 | 453 | panIfTable OBJECT-TYPE 454 | SYNTAX SEQUENCE OF PanIfEntry 455 | MAX-ACCESS not-accessible 456 | STATUS current 457 | DESCRIPTION " 458 | Sub-tree for the current active connectionsPerSecond (CPS) values 459 | for each interface present." 460 | ::= { panSession 11 } 461 | 462 | 463 | ---------------------------------------------------------------------- 464 | -- VsysTable 465 | 466 | panVsysEntry OBJECT-TYPE 467 | SYNTAX PanVsysEntry 468 | MAX-ACCESS not-accessible 469 | STATUS current 470 | DESCRIPTION 471 | "Entries are created when the Vsys's are added to the 472 | entVsysTable." 473 | INDEX { panVsysId } 474 | ::= { panVsysTable 1 } 475 | 476 | PanVsysEntry ::= SEQUENCE { 477 | panVsysId Integer32, 478 | panVsysName DisplayString, 479 | panVsysSessionUtilizationPct Integer32, 480 | panVsysActiveSessions Integer32, 481 | panVsysMaxSessions Integer32, 482 | panVsysActiveTcpCps Integer32, 483 | panVsysActiveUdpCps Integer32, 484 | panVsysActiveOtherIpCps Integer32 485 | } 486 | 487 | panVsysId OBJECT-TYPE 488 | SYNTAX Integer32 489 | MAX-ACCESS read-only 490 | STATUS current 491 | DESCRIPTION 492 | "Vsys id" 493 | ::= { panVsysEntry 1 } 494 | 495 | panVsysName OBJECT-TYPE 496 | SYNTAX DisplayString 497 | MAX-ACCESS read-only 498 | STATUS current 499 | DESCRIPTION 500 | "User assigned vsys name (empty string if not available)" 501 | ::= { panVsysEntry 2 } 502 | 503 | panVsysSessionUtilizationPct OBJECT-TYPE 504 | SYNTAX Integer32 505 | MAX-ACCESS read-only 506 | STATUS current 507 | DESCRIPTION 508 | "Vsys utilization percentage, if session limit is configured. 509 | If session limit is not configured, this value is '0'" 510 | ::= { panVsysEntry 3 } 511 | 512 | panVsysActiveSessions OBJECT-TYPE 513 | SYNTAX Integer32 514 | MAX-ACCESS read-only 515 | STATUS current 516 | DESCRIPTION 517 | "Active sessions on this Vsys" 518 | ::= { panVsysEntry 4 } 519 | 520 | panVsysMaxSessions OBJECT-TYPE 521 | SYNTAX Integer32 522 | MAX-ACCESS read-only 523 | STATUS current 524 | DESCRIPTION 525 | "Max sessions on this Vsys, if session limit is configured. 526 | If session limit is not configured, this value is '0'" 527 | ::= { panVsysEntry 5 } 528 | 529 | panVsysActiveTcpCps OBJECT-TYPE 530 | SYNTAX Integer32 531 | MAX-ACCESS read-only 532 | STATUS current 533 | DESCRIPTION 534 | "Number of active Tcp Connections per second for thie vSys." 535 | ::= { panVsysEntry 6 } 536 | 537 | panVsysActiveUdpCps OBJECT-TYPE 538 | SYNTAX Integer32 539 | MAX-ACCESS read-only 540 | STATUS current 541 | DESCRIPTION 542 | "Number of active Udp Connections per second for thie vSys." 543 | ::= { panVsysEntry 7 } 544 | 545 | panVsysActiveOtherIpCps OBJECT-TYPE 546 | SYNTAX Integer32 547 | MAX-ACCESS read-only 548 | STATUS current 549 | DESCRIPTION 550 | "Number of active Other IP Connections per second for thie vSys." 551 | ::= { panVsysEntry 8 } 552 | 553 | ---------------------------------------------------------------------- 554 | -- Mgmt 555 | 556 | panMgmtPanoramaConnected OBJECT-TYPE 557 | SYNTAX DisplayString 558 | MAX-ACCESS read-only 559 | STATUS current 560 | DESCRIPTION 561 | "Current Connection status to Panorama Server (connected, not-connected)" 562 | ::= { panMgmt 1 } 563 | 564 | panMgmtPanorama2Connected OBJECT-TYPE 565 | SYNTAX DisplayString 566 | MAX-ACCESS read-only 567 | STATUS current 568 | DESCRIPTION 569 | "Current Connection status to Panorama2 Server (connected, not-connected)" 570 | ::= { panMgmt 2 } 571 | 572 | ---------------------------------------------------------------------- 573 | -- GlobalProtect 574 | 575 | panGPGatewayUtilization OBJECT-IDENTITY 576 | STATUS current 577 | DESCRIPTION 578 | "GlobalProtect gateway utilization" 579 | ::= { panGlobalProtect 1 } 580 | 581 | ---------------------------------------------------------------------- 582 | -- GlobalProtect gateway utilization 583 | 584 | panGPGWUtilizationPct OBJECT-TYPE 585 | SYNTAX Integer32 586 | MAX-ACCESS read-only 587 | STATUS current 588 | DESCRIPTION 589 | "GlobalProtect Gateway utilization percentage" 590 | ::= { panGPGatewayUtilization 1 } 591 | 592 | panGPGWUtilizationMaxTunnels OBJECT-TYPE 593 | SYNTAX Integer32 594 | MAX-ACCESS read-only 595 | STATUS current 596 | DESCRIPTION 597 | "Max tunnels allowed" 598 | ::= { panGPGatewayUtilization 2 } 599 | 600 | panGPGWUtilizationActiveTunnels OBJECT-TYPE 601 | SYNTAX Integer32 602 | MAX-ACCESS read-only 603 | STATUS current 604 | DESCRIPTION 605 | "Number of active tunnels" 606 | ::= { panGPGatewayUtilization 3 } 607 | 608 | -------------------------------------------------------------------- 609 | -- Device Logging MIB 610 | panDeviceLoggingLogRate OBJECT-IDENTITY 611 | STATUS current 612 | DESCRIPTION " 613 | Sub-tree for Device Logging Rate statistics." 614 | ::= { panDeviceLogging 1 } 615 | 616 | panDeviceLoggingLogTypeStatTable OBJECT-TYPE 617 | SYNTAX SEQUENCE OF PanDeviceLoggingLogTypeStatEntry 618 | MAX-ACCESS not-accessible 619 | STATUS current 620 | DESCRIPTION " 621 | Sub-tree for the statistics for different log types on the Device." 622 | ::= { panDeviceLogging 2 } 623 | 624 | panDeviceLoggingLogUsageTable OBJECT-TYPE 625 | SYNTAX SEQUENCE OF PanDeviceLoggingLogUsageEntry 626 | MAX-ACCESS not-accessible 627 | STATUS current 628 | DESCRIPTION " 629 | Sub-tree for Log Usage and days retained for different log types on the Device. 630 | Log Disk Usage is avaiable as MB (in use)." 631 | ::= { panDeviceLogging 3 } 632 | 633 | panDeviceLoggingExtFwd OBJECT-IDENTITY 634 | STATUS current 635 | DESCRIPTION " 636 | Sub-tree for tracking dropped logs as ther are forwarded from device." 637 | ::= { panDeviceLogging 4 } 638 | 639 | panDeviceLoggingCollectorConnectionTable OBJECT-TYPE 640 | SYNTAX SEQUENCE OF PanDeviceLoggingCollectorConnectionEntry 641 | MAX-ACCESS not-accessible 642 | STATUS current 643 | DESCRIPTION " 644 | Sub-tree for tracking various log collection entities connected to device." 645 | ::= { panDeviceLogging 5 } 646 | 647 | 648 | --------------------------------------------------------------------------- 649 | -- panSSLBroker 650 | panSSLBrokerStatsTable OBJECT-TYPE 651 | SYNTAX SEQUENCE OF PanSSLBrokerStatsEntry 652 | MAX-ACCESS not-accessible 653 | STATUS current 654 | DESCRIPTION 655 | "Sub-tree for capturing ssl broker statistics and status." 656 | ::= { panSSLBroker 1 } 657 | 658 | panSSLBrokerStatsEntry OBJECT-TYPE 659 | SYNTAX PanSSLBrokerStatsEntry 660 | MAX-ACCESS not-accessible 661 | STATUS current 662 | DESCRIPTION 663 | "Entry of ssl broker statistics and status." 664 | INDEX { index } 665 | ::= { panSSLBrokerStatsTable 1 } 666 | 667 | PanSSLBrokerStatsEntry ::= SEQUENCE { 668 | index Integer32, 669 | chainName DisplayString, 670 | avgLatency Integer32, 671 | sessionCount Integer32 672 | } 673 | 674 | index OBJECT-TYPE 675 | SYNTAX Integer32 676 | MAX-ACCESS read-only 677 | STATUS current 678 | DESCRIPTION 679 | "Index of the ssl broker stats entry" 680 | ::= { panSSLBrokerStatsEntry 1 } 681 | 682 | chainName OBJECT-TYPE 683 | SYNTAX DisplayString 684 | MAX-ACCESS read-only 685 | STATUS current 686 | DESCRIPTION 687 | "Name of ssl broker chain object" 688 | ::= { panSSLBrokerStatsEntry 2 } 689 | 690 | avgLatency OBJECT-TYPE 691 | SYNTAX Integer32 692 | MAX-ACCESS read-only 693 | STATUS current 694 | DESCRIPTION 695 | "Average latency value" 696 | ::= { panSSLBrokerStatsEntry 3 } 697 | 698 | sessionCount OBJECT-TYPE 699 | SYNTAX Integer32 700 | MAX-ACCESS read-only 701 | STATUS current 702 | DESCRIPTION 703 | "Number of active sessions" 704 | ::= { panSSLBrokerStatsEntry 4 } 705 | 706 | --------------------------------------------------------------------------- 707 | -- panDeviceLoggingLogRate 708 | 709 | panDeviceIncomingLogRate OBJECT-TYPE 710 | SYNTAX Unsigned32 711 | MAX-ACCESS read-only 712 | STATUS current 713 | DESCRIPTION 714 | "The incoming rate in logs/s on the Device." 715 | ::= { panDeviceLoggingLogRate 1 } 716 | 717 | panDeviceWriteLogRate OBJECT-TYPE 718 | SYNTAX Unsigned32 719 | MAX-ACCESS read-only 720 | STATUS current 721 | DESCRIPTION 722 | "The write rate in logs/s on the Device." 723 | ::= { panDeviceLoggingLogRate 2 } 724 | 725 | --------------------------------------------------------------------------- 726 | -- panDeviceLoggingLogTypeStatTable 727 | 728 | panDeviceLoggingLogTypeStatEntry OBJECT-TYPE 729 | SYNTAX PanDeviceLoggingLogTypeStatEntry 730 | MAX-ACCESS not-accessible 731 | STATUS current 732 | DESCRIPTION 733 | "Entries are created when the panLcLogUsage are added to the panLcLogUsageTable." 734 | INDEX { panDeviceLoggingDevice, panDeviceLoggingLogType } 735 | ::= { panDeviceLoggingLogTypeStatTable 1 } 736 | 737 | PanDeviceLoggingLogTypeStatEntry ::= SEQUENCE { 738 | panDeviceLoggingDevice DisplayString, 739 | panDeviceLoggingDeviceIndex Integer32, 740 | panDeviceLoggingLogType DisplayString, 741 | panDeviceLoggingLogLastLogCreated TimeStamp, 742 | panDeviceLoggingLogLastLogFwded TimeStamp, 743 | panDeviceLoggingLogLastSeqNumberFwded Counter64, 744 | panDeviceLoggingLogLastSeqNumberAck Counter64, 745 | panDeviceLoggingLogTotalLogsFwded Counter64 746 | } 747 | 748 | panDeviceLoggingDevice OBJECT-TYPE 749 | SYNTAX DisplayString 750 | MAX-ACCESS read-only 751 | STATUS current 752 | DESCRIPTION 753 | "Device Information (Name or Serial Number)." 754 | ::= { panDeviceLoggingLogTypeStatEntry 1 } 755 | 756 | panDeviceLoggingDeviceIndex OBJECT-TYPE 757 | SYNTAX Integer32 758 | MAX-ACCESS read-only 759 | STATUS current 760 | DESCRIPTION 761 | "Index as mentioned in panDeviceLoggingCollectorConnection table." 762 | ::= { panDeviceLoggingLogTypeStatEntry 2 } 763 | 764 | panDeviceLoggingLogType OBJECT-TYPE 765 | SYNTAX DisplayString 766 | MAX-ACCESS read-only 767 | STATUS current 768 | DESCRIPTION 769 | "Type of log." 770 | ::= { panDeviceLoggingLogTypeStatEntry 3 } 771 | 772 | panDeviceLoggingLogLastLogCreated OBJECT-TYPE 773 | SYNTAX TimeStamp 774 | MAX-ACCESS read-only 775 | STATUS current 776 | DESCRIPTION 777 | "Time of the last log creation." 778 | ::= { panDeviceLoggingLogTypeStatEntry 4 } 779 | 780 | panDeviceLoggingLogLastLogFwded OBJECT-TYPE 781 | SYNTAX TimeStamp 782 | MAX-ACCESS read-only 783 | STATUS current 784 | DESCRIPTION 785 | "Time at which last log was forwarded." 786 | ::= { panDeviceLoggingLogTypeStatEntry 5 } 787 | 788 | panDeviceLoggingLogLastSeqNumberFwded OBJECT-TYPE 789 | SYNTAX Counter64 790 | MAX-ACCESS read-only 791 | STATUS current 792 | DESCRIPTION 793 | "Sequence number of the last log that was forwarded." 794 | ::= { panDeviceLoggingLogTypeStatEntry 6 } 795 | 796 | panDeviceLoggingLogLastSeqNumberAck OBJECT-TYPE 797 | SYNTAX Counter64 798 | MAX-ACCESS read-only 799 | STATUS current 800 | DESCRIPTION 801 | "Sequence number of the last log that was acknowledged." 802 | ::= { panDeviceLoggingLogTypeStatEntry 7 } 803 | 804 | panDeviceLoggingLogTotalLogsFwded OBJECT-TYPE 805 | SYNTAX Counter64 806 | MAX-ACCESS read-only 807 | STATUS current 808 | DESCRIPTION 809 | "Total number of logs forwarded." 810 | ::= { panDeviceLoggingLogTypeStatEntry 8 } 811 | 812 | -------------------------------------------------------------------- 813 | -- PanDeviceLoggingLogUsageEntry 814 | 815 | panDeviceLoggingLogUsageEntry OBJECT-TYPE 816 | SYNTAX PanDeviceLoggingLogUsageEntry 817 | MAX-ACCESS not-accessible 818 | STATUS current 819 | DESCRIPTION 820 | "Entries are created when the panDeviceLoggingLogUsage are added to the panDeviceLoggingLogUsageTable." 821 | INDEX { panDeviceLoggingLogUsageLogType } 822 | ::= { panDeviceLoggingLogUsageTable 1 } 823 | 824 | PanDeviceLoggingLogUsageEntry ::= SEQUENCE { 825 | panDeviceLoggingLogUsageLogType DisplayString, 826 | panDeviceLoggingDiskUsageDiskSpace FloatValue, 827 | panDeviceLoggingDiskUsageRetention Unsigned32, 828 | panDeviceLoggingDiskQuotaPct FloatValue, 829 | panDeviceLoggingDiskQuota FloatValue 830 | } 831 | 832 | panDeviceLoggingLogUsageLogType OBJECT-TYPE 833 | SYNTAX DisplayString 834 | MAX-ACCESS read-only 835 | STATUS current 836 | DESCRIPTION 837 | "Log type for Device. " 838 | ::= { panDeviceLoggingLogUsageEntry 1 } 839 | 840 | panDeviceLoggingDiskUsageDiskSpace OBJECT-TYPE 841 | SYNTAX DisplayString 842 | MAX-ACCESS read-only 843 | STATUS current 844 | DESCRIPTION 845 | "Disk Usage (MB) for particular log type for Device. " 846 | ::= { panDeviceLoggingLogUsageEntry 2 } 847 | 848 | panDeviceLoggingDiskUsageRetention OBJECT-TYPE 849 | SYNTAX Unsigned32 850 | MAX-ACCESS read-only 851 | STATUS current 852 | DESCRIPTION 853 | "Log Rentention for particular log type for Device. " 854 | ::= { panDeviceLoggingLogUsageEntry 3 } 855 | 856 | panDeviceLoggingDiskQuotaPct OBJECT-TYPE 857 | SYNTAX DisplayString 858 | MAX-ACCESS read-only 859 | STATUS current 860 | DESCRIPTION 861 | "Disk Quota percentage for particular log type for Device. " 862 | ::= { panDeviceLoggingLogUsageEntry 4 } 863 | 864 | panDeviceLoggingDiskQuota OBJECT-TYPE 865 | SYNTAX DisplayString 866 | MAX-ACCESS read-only 867 | STATUS current 868 | DESCRIPTION 869 | "Disk Quota for particular log type for Device. " 870 | ::= { panDeviceLoggingLogUsageEntry 5 } 871 | 872 | ---------------------------------------------------------------------- 873 | -- panDeviceLoggingExtFwd 874 | 875 | panDeviceLoggingExtFwdCount OBJECT-TYPE 876 | SYNTAX Counter64 877 | MAX-ACCESS read-only 878 | STATUS current 879 | DESCRIPTION 880 | "Total count for logs forwarded." 881 | ::= { panDeviceLoggingExtFwd 1 } 882 | 883 | panDeviceLoggingExtFwdQueueDrop OBJECT-TYPE 884 | SYNTAX Counter64 885 | MAX-ACCESS read-only 886 | STATUS current 887 | DESCRIPTION 888 | "Counter for logs dropped due to queue being full." 889 | ::= { panDeviceLoggingExtFwd 2 } 890 | 891 | panDeviceLoggingExtFwdStatsSendErr OBJECT-TYPE 892 | SYNTAX Counter64 893 | MAX-ACCESS read-only 894 | STATUS current 895 | DESCRIPTION 896 | "Counter for logs discarded due to sending error." 897 | ::= { panDeviceLoggingExtFwd 3 } 898 | 899 | panDeviceLoggingExtFwdStatsTable OBJECT-TYPE 900 | SYNTAX SEQUENCE OF PanDeviceLoggingExtFwdStatsEntry 901 | MAX-ACCESS read-only 902 | STATUS current 903 | DESCRIPTION 904 | "This table shows the status of logs as they are forwarded via syslog, Traps, email and 905 | http/https from this Device." 906 | ::= { panDeviceLoggingExtFwd 4 } 907 | 908 | -------------------------------------------------------------------- 909 | -- panDeviceLoggingExtFwdStatsTable 910 | panDeviceLoggingExtFwdStatsEntry OBJECT-TYPE 911 | SYNTAX PanDeviceLoggingExtFwdStatsEntry 912 | MAX-ACCESS not-accessible 913 | STATUS current 914 | DESCRIPTION 915 | "Entries are created when panDeviceLoggingExtFwdStats are added to panDeviceLoggingExtFwdStatsTable." 916 | INDEX { panDeviceLoggingExtFwdStatsTableType } 917 | ::= { panDeviceLoggingExtFwdStatsTable 1 } 918 | 919 | PanDeviceLoggingExtFwdStatsEntry ::= SEQUENCE { 920 | panDeviceLoggingExtFwdStatsTableType DisplayString, 921 | panDeviceLoggingExtFwdStatsTableEnqueueCount Counter64, 922 | panDeviceLoggingExtFwdStatsTableSendCount Counter64, 923 | panDeviceLoggingExtFwdStatsTableDropCount Counter64, 924 | panDeviceLoggingExtFwdStatsTableQueueDepth Counter64, 925 | panDeviceLoggingExtFwdStatsTable1minAvgSendRate Unsigned32 926 | } 927 | 928 | panDeviceLoggingExtFwdStatsTableType OBJECT-TYPE 929 | SYNTAX DisplayString 930 | MAX-ACCESS read-only 931 | STATUS current 932 | DESCRIPTION 933 | "Name of method used to forward logs." 934 | ::= { panDeviceLoggingExtFwdStatsEntry 1 } 935 | 936 | panDeviceLoggingExtFwdStatsTableEnqueueCount OBJECT-TYPE 937 | SYNTAX Counter64 938 | MAX-ACCESS read-only 939 | STATUS current 940 | DESCRIPTION 941 | "Counter for number of logs enqueued." 942 | ::= { panDeviceLoggingExtFwdStatsEntry 2 } 943 | 944 | panDeviceLoggingExtFwdStatsTableSendCount OBJECT-TYPE 945 | SYNTAX Counter64 946 | MAX-ACCESS read-only 947 | STATUS current 948 | DESCRIPTION 949 | "Counter for number of logs sent." 950 | ::= { panDeviceLoggingExtFwdStatsEntry 3 } 951 | 952 | panDeviceLoggingExtFwdStatsTableDropCount OBJECT-TYPE 953 | SYNTAX Counter64 954 | MAX-ACCESS read-only 955 | STATUS current 956 | DESCRIPTION 957 | "Counter for number of logs dropped." 958 | ::= { panDeviceLoggingExtFwdStatsEntry 4 } 959 | 960 | panDeviceLoggingExtFwdStatsTableQueueDepth OBJECT-TYPE 961 | SYNTAX Counter64 962 | MAX-ACCESS read-only 963 | STATUS current 964 | DESCRIPTION 965 | "Counter for depth of queue." 966 | ::= { panDeviceLoggingExtFwdStatsEntry 5 } 967 | 968 | panDeviceLoggingExtFwdStatsTable1minAvgSendRate OBJECT-TYPE 969 | SYNTAX Unsigned32 970 | MAX-ACCESS read-only 971 | STATUS current 972 | DESCRIPTION 973 | "Counter for average send rate over 1 minute interval." 974 | ::= { panDeviceLoggingExtFwdStatsEntry 6 } 975 | 976 | ------------------------------------------------------------------- 977 | -- panDeviceLoggingCollectorConnectionTable 978 | 979 | panDeviceLoggingCollectorConnectionEntry OBJECT-TYPE 980 | SYNTAX PanDeviceLoggingCollectorConnectionEntry 981 | MAX-ACCESS not-accessible 982 | STATUS current 983 | DESCRIPTION 984 | "Entries are created when the panDeviceLogging are added to the panDeviceLoggingCollectorConnectionTable." 985 | INDEX { panDeviceLoggingCollectorConnectionIP } 986 | ::= { panDeviceLoggingCollectorConnectionTable 1 } 987 | 988 | PanDeviceLoggingCollectorConnectionEntry ::= SEQUENCE { 989 | panDeviceLoggingCollectorConnectionType DisplayString, 990 | panDeviceLoggingCollectorConnectionIP DisplayString, 991 | panDeviceLoggingCollectorConnectionHostname DisplayString, 992 | panDeviceLoggingCollectorConnectionStatus DisplayString 993 | } 994 | 995 | panDeviceLoggingCollectorConnectionType OBJECT-TYPE 996 | SYNTAX DisplayString 997 | MAX-ACCESS read-only 998 | STATUS current 999 | DESCRIPTION 1000 | "Type of log collection entity (CMS/LC)." 1001 | ::= { panDeviceLoggingCollectorConnectionEntry 1 } 1002 | 1003 | panDeviceLoggingCollectorConnectionIP OBJECT-TYPE 1004 | SYNTAX DisplayString 1005 | MAX-ACCESS read-only 1006 | STATUS current 1007 | DESCRIPTION 1008 | "IP of log collection entity (CMS/LC) for non-7K and Gryphon. 1009 | Will display connection ID for 7K and Gryphon." 1010 | ::= { panDeviceLoggingCollectorConnectionEntry 2 } 1011 | 1012 | panDeviceLoggingCollectorConnectionHostname OBJECT-TYPE 1013 | SYNTAX DisplayString 1014 | MAX-ACCESS read-only 1015 | STATUS current 1016 | DESCRIPTION 1017 | "Hostname of log collection entity (CMS/LC)." 1018 | ::= { panDeviceLoggingCollectorConnectionEntry 3 } 1019 | 1020 | panDeviceLoggingCollectorConnectionStatus OBJECT-TYPE 1021 | SYNTAX DisplayString 1022 | MAX-ACCESS read-only 1023 | STATUS current 1024 | DESCRIPTION 1025 | "Connection status of log collection entity (CMS/LC)." 1026 | ::= { panDeviceLoggingCollectorConnectionEntry 4 } 1027 | 1028 | ---------------------------------------------------------------------- 1029 | -- LogCollector 1030 | 1031 | panLcStat OBJECT-IDENTITY 1032 | STATUS current 1033 | DESCRIPTION " 1034 | Sub-tree for the Log collection statistics." 1035 | ::= { panLogCollector 1 } 1036 | 1037 | ---------------------------------------------------------------------- 1038 | -- LogCollector Stats 1039 | 1040 | panLcLogRate OBJECT-TYPE 1041 | SYNTAX Unsigned32 1042 | MAX-ACCESS read-only 1043 | STATUS current 1044 | DESCRIPTION 1045 | "The write rate in logs/s on the Log Collection" 1046 | ::= { panLcStat 1 } 1047 | 1048 | panLcLogDuration OBJECT-IDENTITY 1049 | STATUS deprecated 1050 | DESCRIPTION " 1051 | Sub-tree for the Log Duration on the Log Collector. Log 1052 | Duration is Expressed in Days of storage." 1053 | ::= { panLcStat 2 } 1054 | 1055 | panLcDiskUsageTable OBJECT-TYPE 1056 | SYNTAX SEQUENCE OF PanLcDiskUsageEntry 1057 | MAX-ACCESS not-accessible 1058 | STATUS deprecated 1059 | DESCRIPTION " 1060 | Sub-tree for the Log Disk Usage on the Log Collector. Log 1061 | Disk Usage is available as MB in use." 1062 | ::= { panLcStat 3 } 1063 | 1064 | panLcLogUsageTable OBJECT-TYPE 1065 | SYNTAX SEQUENCE OF PanLcLogUsageEntry 1066 | MAX-ACCESS not-accessible 1067 | STATUS current 1068 | DESCRIPTION " 1069 | Sub-tree for the Log Usage and data retention on the Log Collector(non localDB). 1070 | Log Disk Usage is available as MB in use." 1071 | ::= { panLcStat 4 } 1072 | 1073 | panLocalLogUsageTable OBJECT-TYPE 1074 | SYNTAX SEQUENCE OF PanLocalLogUsageEntry 1075 | MAX-ACCESS not-accessible 1076 | STATUS current 1077 | DESCRIPTION " 1078 | Sub-tree for the Log Usage and data retention on the Log Collector(localDB). 1079 | Log Disk Usage is available as MB in use." 1080 | ::= { panLcStat 5 } 1081 | 1082 | panLcDiskIOPSTable OBJECT-TYPE 1083 | SYNTAX SEQUENCE OF PanLcDiskIOPSEntry 1084 | MAX-ACCESS not-accessible 1085 | STATUS current 1086 | DESCRIPTION " 1087 | Sub-tree for Log Disk I/O throughput on the Log Collector and Panorama." 1088 | ::= { panLcStat 6 } 1089 | 1090 | panLcLogDurationTraffic OBJECT-TYPE 1091 | SYNTAX Unsigned32 1092 | MAX-ACCESS read-only 1093 | STATUS deprecated 1094 | DESCRIPTION 1095 | "The Log duration (in days) for the traffic logs on the Log Collector" 1096 | ::= { panLcLogDuration 1 } 1097 | 1098 | panLcLogDurationConfig OBJECT-TYPE 1099 | SYNTAX Unsigned32 1100 | MAX-ACCESS read-only 1101 | STATUS deprecated 1102 | DESCRIPTION 1103 | "The Log duration (in days) for the config logs on the Log Collector" 1104 | ::= { panLcLogDuration 2 } 1105 | 1106 | panLcLogDurationSystem OBJECT-TYPE 1107 | SYNTAX Unsigned32 1108 | MAX-ACCESS read-only 1109 | STATUS deprecated 1110 | DESCRIPTION 1111 | "The Log duration (in days) for the system logs on the Log Collector" 1112 | ::= { panLcLogDuration 3 } 1113 | 1114 | panLcLogDurationThreat OBJECT-TYPE 1115 | SYNTAX Unsigned32 1116 | MAX-ACCESS read-only 1117 | STATUS deprecated 1118 | DESCRIPTION 1119 | "The Log duration (in days) for the threat logs on the Log Collector" 1120 | ::= { panLcLogDuration 4 } 1121 | 1122 | panLcLogDurationAppstat OBJECT-TYPE 1123 | SYNTAX Unsigned32 1124 | MAX-ACCESS read-only 1125 | STATUS deprecated 1126 | DESCRIPTION 1127 | "The Log duration (in days) for the appstat logs on the Log Collector" 1128 | ::= { panLcLogDuration 5 } 1129 | 1130 | panLcLogDurationTrsum OBJECT-TYPE 1131 | SYNTAX Unsigned32 1132 | MAX-ACCESS read-only 1133 | STATUS deprecated 1134 | DESCRIPTION 1135 | "The Log duration (in days) for the trsum logs on the Log Collector" 1136 | ::= { panLcLogDuration 6 } 1137 | 1138 | panLcLogDurationThsum OBJECT-TYPE 1139 | SYNTAX Unsigned32 1140 | MAX-ACCESS read-only 1141 | STATUS deprecated 1142 | DESCRIPTION 1143 | "The Log duration (in days) for the thsum logs on the Log Collector" 1144 | ::= { panLcLogDuration 7 } 1145 | 1146 | panLcLogDurationEvent OBJECT-TYPE 1147 | SYNTAX Unsigned32 1148 | MAX-ACCESS read-only 1149 | STATUS deprecated 1150 | DESCRIPTION 1151 | "The Log duration (in days) for the event logs on the Log Collector" 1152 | ::= { panLcLogDuration 8 } 1153 | 1154 | panLcLogDurationAlarm OBJECT-TYPE 1155 | SYNTAX Unsigned32 1156 | MAX-ACCESS read-only 1157 | STATUS deprecated 1158 | DESCRIPTION 1159 | "The Log duration (in days) for the alarm logs on the Log Collector" 1160 | ::= { panLcLogDuration 9 } 1161 | 1162 | panLcLogDurationHipmatch OBJECT-TYPE 1163 | SYNTAX Unsigned32 1164 | MAX-ACCESS read-only 1165 | STATUS deprecated 1166 | DESCRIPTION 1167 | "The Log duration (in days) for the hipmatch logs on the Log Collector" 1168 | ::= { panLcLogDuration 10 } 1169 | 1170 | panLcLogDurationUserid OBJECT-TYPE 1171 | SYNTAX Unsigned32 1172 | MAX-ACCESS read-only 1173 | STATUS deprecated 1174 | DESCRIPTION 1175 | "The Log duration (in days) for the userid logs on the Log Collector" 1176 | ::= { panLcLogDuration 11 } 1177 | 1178 | panLcDiskUsageEntry OBJECT-TYPE 1179 | SYNTAX PanLcDiskUsageEntry 1180 | MAX-ACCESS not-accessible 1181 | STATUS deprecated 1182 | DESCRIPTION 1183 | "Entries are created when the panLcDiskUsage are added to the 1184 | panLcDiskUsageTable." 1185 | INDEX { panLcDiskUsageId } 1186 | ::= { panLcDiskUsageTable 1 } 1187 | 1188 | PanLcDiskUsageEntry ::= SEQUENCE { 1189 | panLcDiskUsageId Integer32, 1190 | panLcDiskUsage Unsigned32 1191 | } 1192 | 1193 | panLocalLogUsageEntry OBJECT-TYPE 1194 | SYNTAX PanLocalLogUsageEntry 1195 | MAX-ACCESS not-accessible 1196 | STATUS current 1197 | DESCRIPTION 1198 | "Entries are created when the panLocalLogUsage are added to the panLocalLogUsageTable." 1199 | INDEX { panLcLogType } 1200 | ::= { panLocalLogUsageTable 1 } 1201 | 1202 | PanLocalLogUsageEntry ::= SEQUENCE { 1203 | panLocalLogType DisplayString, 1204 | panLocalDiskUsageDiskSpace FloatValue, 1205 | panLocalDiskUsageRetention Unsigned32, 1206 | panLocalDiskQuota FloatValue, 1207 | panLocalDiskQuotaPct FloatValue 1208 | } 1209 | 1210 | panLocalLogType OBJECT-TYPE 1211 | SYNTAX DisplayString 1212 | MAX-ACCESS read-only 1213 | STATUS current 1214 | DESCRIPTION 1215 | "Log type for Log Collector. " 1216 | ::= { panLocalLogUsageEntry 1 } 1217 | 1218 | panLocalDiskUsageDiskSpace OBJECT-TYPE 1219 | SYNTAX DisplayString 1220 | MAX-ACCESS read-only 1221 | STATUS current 1222 | DESCRIPTION 1223 | "Disk Usage (in MB) for particular log type for Log Collector. " 1224 | ::= { panLocalLogUsageEntry 2 } 1225 | 1226 | panLocalDiskUsageRetention OBJECT-TYPE 1227 | SYNTAX Unsigned32 1228 | MAX-ACCESS read-only 1229 | STATUS current 1230 | DESCRIPTION 1231 | "Log Rentention for particular log type for Log Collector. " 1232 | ::= { panLocalLogUsageEntry 3 } 1233 | 1234 | panLocalDiskQuota OBJECT-TYPE 1235 | SYNTAX DisplayString 1236 | MAX-ACCESS read-only 1237 | STATUS current 1238 | DESCRIPTION 1239 | "Disk Quota (in MB) for particular log type for Log Collector. " 1240 | ::= { panLocalLogUsageEntry 4 } 1241 | 1242 | panLocalDiskQuotaPct OBJECT-TYPE 1243 | SYNTAX DisplayString 1244 | MAX-ACCESS read-only 1245 | STATUS current 1246 | DESCRIPTION 1247 | "Disk Quota Percentage for particular log type for Log Collector. " 1248 | ::= { panLocalLogUsageEntry 5 } 1249 | 1250 | 1251 | panLcDiskIOPSEntry OBJECT-TYPE 1252 | SYNTAX PanLcDiskIOPSEntry 1253 | MAX-ACCESS not-accessible 1254 | STATUS current 1255 | DESCRIPTION 1256 | "Entries are created when panLcDiskIOPSEntry are added to the panLcDiskIOPSTable." 1257 | INDEX { panLcDiskIOPSId } 1258 | ::= { panLcDiskIOPSTable 1 } 1259 | 1260 | PanLcDiskIOPSEntry ::= SEQUENCE { 1261 | panLcDiskIOPSId DisplayString, 1262 | panLcDiskIORead5min Counter64, 1263 | panLcDiskIOWrite5min Counter64 1264 | } 1265 | 1266 | panLcDiskIOPSId OBJECT-TYPE 1267 | SYNTAX DisplayString 1268 | MAX-ACCESS read-only 1269 | STATUS current 1270 | DESCRIPTION 1271 | "Disk number for Log Collector or Panorama. " 1272 | ::= { panLcDiskIOPSEntry 1 } 1273 | 1274 | panLcDiskIORead5min OBJECT-TYPE 1275 | SYNTAX Counter64 1276 | MAX-ACCESS read-only 1277 | STATUS current 1278 | DESCRIPTION 1279 | "Disk read rate over a span of 5 minute interval." 1280 | ::= { panLcDiskIOPSEntry 2 } 1281 | 1282 | panLcDiskIOWrite5min OBJECT-TYPE 1283 | SYNTAX Counter64 1284 | MAX-ACCESS read-only 1285 | STATUS current 1286 | DESCRIPTION 1287 | "Disk write rate over a span of 5 minute interval." 1288 | ::= { panLcDiskIOPSEntry 3 } 1289 | 1290 | panLcLogUsageEntry OBJECT-TYPE 1291 | SYNTAX PanLcLogUsageEntry 1292 | MAX-ACCESS not-accessible 1293 | STATUS current 1294 | DESCRIPTION 1295 | "Entries are created when the panLcLogUsage are added to the panLcLogUsageTable." 1296 | INDEX { panLcLogType } 1297 | ::= { panLcLogUsageTable 1 } 1298 | 1299 | PanLcLogUsageEntry ::= SEQUENCE { 1300 | panLcLogType DisplayString, 1301 | panLcDiskUsageDiskSpacePct FloatValue, 1302 | panLcDiskUsageRetention Unsigned32, 1303 | panLcDiskQuotaPct FloatValue 1304 | } 1305 | 1306 | panLcLogType OBJECT-TYPE 1307 | SYNTAX DisplayString 1308 | MAX-ACCESS read-only 1309 | STATUS current 1310 | DESCRIPTION 1311 | "Log type for Log Collector. " 1312 | ::= { panLcLogUsageEntry 1 } 1313 | 1314 | panLcDiskUsageDiskSpacePct OBJECT-TYPE 1315 | SYNTAX DisplayString 1316 | MAX-ACCESS read-only 1317 | STATUS current 1318 | DESCRIPTION 1319 | "Disk Usage Percentage for particular log type for Log Collector 1320 | aggregated over all disks. " 1321 | ::= { panLcLogUsageEntry 2 } 1322 | 1323 | panLcDiskUsageRetention OBJECT-TYPE 1324 | SYNTAX Unsigned32 1325 | MAX-ACCESS read-only 1326 | STATUS current 1327 | DESCRIPTION 1328 | "Log Rentention for particular log type for Log Collector. " 1329 | ::= { panLcLogUsageEntry 3 } 1330 | 1331 | panLcDiskQuotaPct OBJECT-TYPE 1332 | SYNTAX DisplayString 1333 | MAX-ACCESS read-only 1334 | STATUS current 1335 | DESCRIPTION 1336 | "Disk Quota Percentage for particular log type for Log Collector 1337 | aggregated over all disks. " 1338 | ::= { panLcLogUsageEntry 4 } 1339 | 1340 | panLcDiskUsageId OBJECT-TYPE 1341 | SYNTAX Integer32 1342 | MAX-ACCESS read-only 1343 | STATUS deprecated 1344 | DESCRIPTION 1345 | "The Log disk id" 1346 | ::= { panLcDiskUsageEntry 1 } 1347 | 1348 | panLcDiskUsage OBJECT-TYPE 1349 | SYNTAX Unsigned32 1350 | MAX-ACCESS read-only 1351 | STATUS deprecated 1352 | DESCRIPTION 1353 | "The Log disk usage on the Log Collector" 1354 | ::= { panLcDiskUsageEntry 2 } 1355 | 1356 | panLcIsRedundancyMember OBJECT-TYPE 1357 | SYNTAX TruthValue 1358 | MAX-ACCESS read-only 1359 | STATUS current 1360 | DESCRIPTION 1361 | "True value indicates this Log Collector is part of a Collector Group with Redundancy is enabled" 1362 | ::= { panLogCollector 2 } 1363 | 1364 | panLcLogFwdStatsTable OBJECT-TYPE 1365 | SYNTAX SEQUENCE OF PanLcLogFwdStatsEntry 1366 | MAX-ACCESS read-only 1367 | STATUS current 1368 | DESCRIPTION 1369 | "This table shows the status of logs as they are forwarded via syslog, Traps, email and 1370 | http/https from this Log Collector." 1371 | ::= { panLogCollector 3 } 1372 | ------------------------------------------------------------------ 1373 | -- panLcLogFwdStatsTable 1374 | 1375 | panLcLogFwdStatsEntry OBJECT-TYPE 1376 | SYNTAX PanLcLogFwdStatsEntry 1377 | MAX-ACCESS not-accessible 1378 | STATUS current 1379 | DESCRIPTION 1380 | "Entries are created when panLcLogFwdStats are added to panLcLogFwdStatsTable." 1381 | INDEX { panLcLogFwdStatsTableType } 1382 | ::= { panLcLogFwdStatsTable 1 } 1383 | 1384 | PanLcLogFwdStatsEntry ::= SEQUENCE { 1385 | panLcLogFwdStatsTableType DisplayString, 1386 | panLcLogFwdStatsTableEnqueueCount Counter64, 1387 | panLcLogFwdStatsTableSendCount Counter64, 1388 | panLcLogFwdStatsTableDropCount Counter64, 1389 | panLcLogFwdStatsTableQueueDepth Counter64 1390 | } 1391 | 1392 | panLcLogFwdStatsTableType OBJECT-TYPE 1393 | SYNTAX DisplayString 1394 | MAX-ACCESS read-only 1395 | STATUS current 1396 | DESCRIPTION 1397 | "Name of method used to forward logs." 1398 | ::= { panLcLogFwdStatsEntry 1 } 1399 | 1400 | panLcLogFwdStatsTableEnqueueCount OBJECT-TYPE 1401 | SYNTAX Counter64 1402 | MAX-ACCESS read-only 1403 | STATUS current 1404 | DESCRIPTION 1405 | "Counter for number of logs enqueued." 1406 | ::= { panLcLogFwdStatsEntry 2 } 1407 | 1408 | panLcLogFwdStatsTableSendCount OBJECT-TYPE 1409 | SYNTAX Counter64 1410 | MAX-ACCESS read-only 1411 | STATUS current 1412 | DESCRIPTION 1413 | "Counter for number of logs sent." 1414 | ::= { panLcLogFwdStatsEntry 3 } 1415 | 1416 | panLcLogFwdStatsTableDropCount OBJECT-TYPE 1417 | SYNTAX Counter64 1418 | MAX-ACCESS read-only 1419 | STATUS current 1420 | DESCRIPTION 1421 | "Counter for number of logs dropped." 1422 | ::= { panLcLogFwdStatsEntry 4 } 1423 | 1424 | panLcLogFwdStatsTableQueueDepth OBJECT-TYPE 1425 | SYNTAX Counter64 1426 | MAX-ACCESS read-only 1427 | STATUS current 1428 | DESCRIPTION 1429 | "Counter for depth of queue." 1430 | ::= { panLcLogFwdStatsEntry 5 } 1431 | 1432 | -- panLcLoggingConnectedDeviceTable 1433 | 1434 | panLcLoggingConnectedDeviceTable OBJECT-TYPE 1435 | SYNTAX SEQUENCE OF PanLcLoggingConnectedDeviceEntry 1436 | MAX-ACCESS read-only 1437 | STATUS current 1438 | DESCRIPTION 1439 | "This table shows the details of all devices logging to this Log Collector." 1440 | ::= { panLogCollector 4 } 1441 | 1442 | panLcLoggingConnectedDeviceEntry OBJECT-TYPE 1443 | SYNTAX PanLcLoggingConnectedDeviceEntry 1444 | MAX-ACCESS not-accessible 1445 | STATUS current 1446 | DESCRIPTION 1447 | "Entries are created when panLcLoggingConnectedDevice are added to panLcLoggingConnectedDeviceTable." 1448 | INDEX { panLcLoggingConnectedDeviceConnectionId } 1449 | ::= { panLcLoggingConnectedDeviceTable 1 } 1450 | 1451 | PanLcLoggingConnectedDeviceEntry ::= SEQUENCE { 1452 | panLcLoggingConnectedDeviceName DisplayString, 1453 | panLcLoggingConnectedDeviceConnectionId DisplayString, 1454 | panLcLoggingConnectedIdLogRate Unsigned32 1455 | } 1456 | 1457 | panLcLoggingConnectedDeviceName OBJECT-TYPE 1458 | SYNTAX DisplayString 1459 | MAX-ACCESS read-only 1460 | STATUS current 1461 | DESCRIPTION 1462 | "Name of the device being polled." 1463 | ::= { panLcLoggingConnectedDeviceEntry 1 } 1464 | 1465 | panLcLoggingConnectedDeviceConnectionId OBJECT-TYPE 1466 | SYNTAX DisplayString 1467 | MAX-ACCESS read-only 1468 | STATUS current 1469 | DESCRIPTION 1470 | "Connection id of the device being polled." 1471 | ::= { panLcLoggingConnectedDeviceEntry 2 } 1472 | 1473 | panLcLoggingConnectedIdLogRate OBJECT-TYPE 1474 | SYNTAX Unsigned32 1475 | MAX-ACCESS read-only 1476 | STATUS current 1477 | DESCRIPTION 1478 | "Logging rate for the connection." 1479 | ::= { panLcLoggingConnectedDeviceEntry 3 } 1480 | 1481 | -- panLcLoggingDeviceTable 1482 | 1483 | panLcLoggingDeviceTable OBJECT-TYPE 1484 | SYNTAX SEQUENCE OF PanLcLoggingDeviceEntry 1485 | MAX-ACCESS read-only 1486 | STATUS current 1487 | DESCRIPTION 1488 | "This table shows the details of logs forwarded by devices logging to this Log Collector." 1489 | ::= { panLogCollector 5 } 1490 | 1491 | panLcLoggingDeviceEntry OBJECT-TYPE 1492 | SYNTAX PanLcLoggingDeviceEntry 1493 | MAX-ACCESS not-accessible 1494 | STATUS current 1495 | DESCRIPTION 1496 | "Entries are created when panLcLoggingDevice are added to panLcLoggingDeviceTable." 1497 | INDEX { panLcLoggingDeviceConnectionId, 1498 | panLcLoggingLogType } 1499 | ::= { panLcLoggingDeviceTable 1 } 1500 | 1501 | PanLcLoggingDeviceEntry ::= SEQUENCE { 1502 | panLcLoggingDeviceConnectionId DisplayString, 1503 | panLcLoggingLogType DisplayString, 1504 | panLcLogTypeLastLogRecd TimeStamp, 1505 | panLcLogTypeLastSeqNumRecd Counter64, 1506 | panLcLogTypeLastLogGen TimeStamp 1507 | } 1508 | 1509 | panLcLoggingDeviceConnectionId OBJECT-TYPE 1510 | SYNTAX DisplayString 1511 | MAX-ACCESS read-only 1512 | STATUS current 1513 | DESCRIPTION 1514 | "Connection id of the device being polled." 1515 | ::= { panLcLoggingDeviceEntry 1 } 1516 | 1517 | panLcLoggingLogType OBJECT-TYPE 1518 | SYNTAX DisplayString 1519 | MAX-ACCESS read-only 1520 | STATUS current 1521 | DESCRIPTION 1522 | "Log Type of the log being polled." 1523 | ::= { panLcLoggingDeviceEntry 2 } 1524 | 1525 | panLcLogTypeLastLogRecd OBJECT-TYPE 1526 | SYNTAX TimeStamp 1527 | MAX-ACCESS read-only 1528 | STATUS current 1529 | DESCRIPTION 1530 | "Time at which the last log was received." 1531 | ::= { panLcLoggingDeviceEntry 3 } 1532 | 1533 | panLcLogTypeLastSeqNumRecd OBJECT-TYPE 1534 | SYNTAX Counter64 1535 | MAX-ACCESS read-only 1536 | STATUS current 1537 | DESCRIPTION 1538 | "Last sequence number received for a type of log." 1539 | ::= { panLcLoggingDeviceEntry 4 } 1540 | 1541 | panLcLogTypeLastLogGen OBJECT-TYPE 1542 | SYNTAX TimeStamp 1543 | MAX-ACCESS read-only 1544 | STATUS current 1545 | DESCRIPTION 1546 | "Time at which the last log was generated." 1547 | ::= { panLcLoggingDeviceEntry 5 } 1548 | 1549 | ---------------------------------------------------------------------- 1550 | -- Events 1551 | 1552 | panCommonEventObjs OBJECT-IDENTITY 1553 | STATUS current 1554 | DESCRIPTION " 1555 | Branch for objects meant only to be sent in event varbinds." 1556 | ::= { panCommonEvents 1 } 1557 | 1558 | panCommonEventEvents OBJECT-IDENTITY 1559 | STATUS current 1560 | DESCRIPTION " 1561 | Branch for the events themselves." 1562 | ::= { panCommonEvents 2 } 1563 | 1564 | panCommonEventEventsV2 OBJECT-IDENTITY 1565 | STATUS current 1566 | DESCRIPTION " 1567 | Branch for SNMPv2 events. The OIDs for SNMPv2 events should 1568 | have a zero as the next-to-last sub-identifier (as specified 1569 | in RFC1902)." 1570 | ::= { panCommonEventEvents 0 } 1571 | 1572 | -- Objects sent only in events 1573 | 1574 | panCommonEventDescr OBJECT-TYPE 1575 | SYNTAX DisplayString 1576 | MAX-ACCESS accessible-for-notify 1577 | STATUS current 1578 | DESCRIPTION 1579 | "String that provides a textual description of the event." 1580 | ::= { panCommonEventObjs 1 } 1581 | 1582 | -- Event descriptions 1583 | 1584 | panCommonEventLog NOTIFICATION-TYPE 1585 | OBJECTS { panCommonEventDescr } 1586 | STATUS current 1587 | DESCRIPTION 1588 | "A config/system/firewall/threat log" 1589 | ::= { panCommonEventEventsV2 1 } 1590 | 1591 | ---------------------------------------------------------------------- 1592 | -- GlobalCounters 1593 | 1594 | panAhoSw OBJECT-TYPE 1595 | SYNTAX Counter64 1596 | MAX-ACCESS read-only 1597 | STATUS current 1598 | DESCRIPTION 1599 | "The total usage of software for AHO" 1600 | ::= { panGlobalCounters 1 } 1601 | 1602 | panDfaSw OBJECT-TYPE 1603 | SYNTAX Counter64 1604 | MAX-ACCESS read-only 1605 | STATUS current 1606 | DESCRIPTION 1607 | "The total number of dfa match using software" 1608 | ::= { panGlobalCounters 2 } 1609 | 1610 | panFlowHostServiceAllow OBJECT-TYPE 1611 | SYNTAX Counter64 1612 | MAX-ACCESS read-only 1613 | STATUS current 1614 | DESCRIPTION 1615 | "Device management session allowed" 1616 | ::= { panGlobalCounters 3 } 1617 | 1618 | panHaPathmonSent OBJECT-TYPE 1619 | SYNTAX Counter64 1620 | MAX-ACCESS read-only 1621 | STATUS current 1622 | DESCRIPTION 1623 | "HA path-monitoring packets sent" 1624 | ::= { panGlobalCounters 4 } 1625 | 1626 | panAhoFpga OBJECT-TYPE 1627 | SYNTAX Counter64 1628 | MAX-ACCESS read-only 1629 | STATUS current 1630 | DESCRIPTION 1631 | "The total requests to FPGA for AHO" 1632 | ::= { panGlobalCounters 5 } 1633 | 1634 | panDfaFpga OBJECT-TYPE 1635 | SYNTAX Counter64 1636 | MAX-ACCESS read-only 1637 | STATUS current 1638 | DESCRIPTION 1639 | "The total requests to FPGA for DFA" 1640 | ::= { panGlobalCounters 6 } 1641 | 1642 | panFpgaPkt OBJECT-TYPE 1643 | SYNTAX Counter64 1644 | MAX-ACCESS read-only 1645 | STATUS current 1646 | DESCRIPTION 1647 | "The packets held because of requests to FPGA" 1648 | ::= { panGlobalCounters 7 } 1649 | 1650 | panGlobalCountersDOSCounters OBJECT-IDENTITY 1651 | STATUS current 1652 | DESCRIPTION 1653 | "Sub-tree for Global DOS counters" 1654 | ::= { panGlobalCounters 8 } 1655 | 1656 | panGlobalCountersDropCounters OBJECT-IDENTITY 1657 | STATUS current 1658 | DESCRIPTION 1659 | "Sub-tree for Global Drop counters" 1660 | ::= { panGlobalCounters 9 } 1661 | 1662 | panGlobalCountersIPFragmentationCounters OBJECT-IDENTITY 1663 | STATUS current 1664 | DESCRIPTION 1665 | "Sub-tree for Global IPFragmentation counters" 1666 | ::= { panGlobalCounters 10 } 1667 | 1668 | panGlobalCountersTCPState OBJECT-IDENTITY 1669 | STATUS current 1670 | DESCRIPTION 1671 | "Sub-tree for Global TCPState counters" 1672 | ::= { panGlobalCounters 11 } 1673 | 1674 | panGlobalCountersTunnelInspect OBJECT-IDENTITY 1675 | STATUS current 1676 | DESCRIPTION 1677 | "Sub-tree for Global Tunnel (GRE, IPSEC and GTP) counters" 1678 | ::= { panGlobalCounters 12 } 1679 | 1680 | 1681 | ---------------------------------------------------------------------- 1682 | -- Global DOS Counters 1683 | 1684 | panFlowDosAgMaxSessLimit OBJECT-TYPE 1685 | SYNTAX Counter64 1686 | MAX-ACCESS read-only 1687 | STATUS current 1688 | DESCRIPTION 1689 | "Session limit reached for aggregate profile, drop session" 1690 | ::= { panGlobalCountersDOSCounters 1 } 1691 | 1692 | panFlowDosBlkNumEntries OBJECT-TYPE 1693 | SYNTAX Counter64 1694 | MAX-ACCESS read-only 1695 | STATUS current 1696 | DESCRIPTION 1697 | "Number of entries in DOS block table" 1698 | ::= { panGlobalCountersDOSCounters 2 } 1699 | 1700 | panFlowDosClMaxSessLimit OBJECT-TYPE 1701 | SYNTAX Counter64 1702 | MAX-ACCESS read-only 1703 | STATUS current 1704 | DESCRIPTION 1705 | "Session limit reached for classified profile, drop session" 1706 | ::= { panGlobalCountersDOSCounters 3 } 1707 | 1708 | panFlowDosClSyncookieAckErr OBJECT-TYPE 1709 | SYNTAX Counter64 1710 | MAX-ACCESS read-only 1711 | STATUS current 1712 | DESCRIPTION 1713 | "TCP SYN cookies: Invalid ACKs received, classified profile" 1714 | ::= { panGlobalCountersDOSCounters 4 } 1715 | 1716 | panFlowDosClSyncookieAckRcv OBJECT-TYPE 1717 | SYNTAX Counter64 1718 | MAX-ACCESS read-only 1719 | STATUS current 1720 | DESCRIPTION 1721 | "TCP SYN cookies: ACKs to cookies received, classified profile" 1722 | ::= { panGlobalCountersDOSCounters 5 } 1723 | 1724 | panFlowDosClSyncookieBlkDur OBJECT-TYPE 1725 | SYNTAX Counter64 1726 | MAX-ACCESS read-only 1727 | STATUS current 1728 | DESCRIPTION 1729 | "Packets dropped: Flagged for blocking and under block duration for cl" 1730 | ::= { panGlobalCountersDOSCounters 6 } 1731 | 1732 | panFlowDosClSyncookieMax OBJECT-TYPE 1733 | SYNTAX Counter64 1734 | MAX-ACCESS read-only 1735 | STATUS current 1736 | DESCRIPTION 1737 | "Packet dropped: SYN cookies maximum threshold reached, classified pro" 1738 | ::= { panGlobalCountersDOSCounters 7 } 1739 | 1740 | panFlowDosClSyncookieSent OBJECT-TYPE 1741 | SYNTAX Counter64 1742 | MAX-ACCESS read-only 1743 | STATUS current 1744 | DESCRIPTION 1745 | "TCP SYN cookies: cookies sent, classified profile" 1746 | ::= { panGlobalCountersDOSCounters 8 } 1747 | 1748 | panFlowMeterVsysThrottle OBJECT-TYPE 1749 | SYNTAX Counter64 1750 | MAX-ACCESS read-only 1751 | STATUS current 1752 | DESCRIPTION 1753 | "Session metering: sessions throttled by vsys configuration" 1754 | ::= { panGlobalCountersDOSCounters 9 } 1755 | 1756 | 1757 | panFlowPolicyDeny OBJECT-TYPE 1758 | SYNTAX Counter64 1759 | MAX-ACCESS read-only 1760 | STATUS current 1761 | DESCRIPTION 1762 | "Session setup: denied by policy" 1763 | ::= { panGlobalCountersDOSCounters 10 } 1764 | 1765 | panFlowPolicyNat OBJECT-TYPE 1766 | SYNTAX Counter64 1767 | MAX-ACCESS read-only 1768 | STATUS current 1769 | DESCRIPTION 1770 | "Session setup: source NAT IP/port allocation error" 1771 | ::= { panGlobalCountersDOSCounters 11 } 1772 | 1773 | panFlowScanDrop OBJECT-TYPE 1774 | SYNTAX Counter64 1775 | MAX-ACCESS read-only 1776 | STATUS current 1777 | DESCRIPTION 1778 | "Session setup: denied by scan detection" 1779 | ::= { panGlobalCountersDOSCounters 12 } 1780 | 1781 | panFlowDosDropIpBlocked OBJECT-TYPE 1782 | SYNTAX Counter64 1783 | MAX-ACCESS read-only 1784 | STATUS current 1785 | DESCRIPTION 1786 | "Packets dropped: Flagged for blocking and under block duration by oth" 1787 | ::= { panGlobalCountersDOSCounters 13 } 1788 | 1789 | panFlowDosRedIcmp OBJECT-TYPE 1790 | SYNTAX Counter64 1791 | MAX-ACCESS read-only 1792 | STATUS current 1793 | DESCRIPTION 1794 | "Packets dropped: Zone protection protocol 'icmp' RED" 1795 | ::= { panGlobalCountersDOSCounters 14 } 1796 | 1797 | panFlowDosRedIcmp6 OBJECT-TYPE 1798 | SYNTAX Counter64 1799 | MAX-ACCESS read-only 1800 | STATUS current 1801 | DESCRIPTION 1802 | "Packets dropped: Zone protection protocol 'icmpv6' RED" 1803 | ::= { panGlobalCountersDOSCounters 15 } 1804 | 1805 | 1806 | panFlowDosRedIp OBJECT-TYPE 1807 | SYNTAX Counter64 1808 | MAX-ACCESS read-only 1809 | STATUS current 1810 | DESCRIPTION 1811 | "Packets dropped: Zone protection protocol 'other-ip' RED" 1812 | ::= { panGlobalCountersDOSCounters 16 } 1813 | 1814 | panFlowDosRedTcp OBJECT-TYPE 1815 | SYNTAX Counter64 1816 | MAX-ACCESS read-only 1817 | STATUS current 1818 | DESCRIPTION 1819 | "Packets dropped: Zone protection protocol 'tcp-syn' RED" 1820 | ::= { panGlobalCountersDOSCounters 17 } 1821 | 1822 | panFlowDosRedUdp OBJECT-TYPE 1823 | SYNTAX Counter64 1824 | MAX-ACCESS read-only 1825 | STATUS current 1826 | DESCRIPTION 1827 | "Packets dropped: Zone protection protocol 'udp' RED" 1828 | ::= { panGlobalCountersDOSCounters 18 } 1829 | 1830 | panFlowDosRuleAgBlkDur OBJECT-TYPE 1831 | SYNTAX Counter64 1832 | MAX-ACCESS read-only 1833 | STATUS current 1834 | DESCRIPTION 1835 | "Packets dropped: Flagged for blocking and under block duration for ag" 1836 | ::= { panGlobalCountersDOSCounters 19 } 1837 | 1838 | panFlowDosRuleAgRedAct OBJECT-TYPE 1839 | SYNTAX Counter64 1840 | MAX-ACCESS read-only 1841 | STATUS current 1842 | DESCRIPTION 1843 | "Packets dropped: Activate aggregate RED threshold reached, random ear" 1844 | ::= { panGlobalCountersDOSCounters 20 } 1845 | 1846 | panFlowDosRuleAgRedMax OBJECT-TYPE 1847 | SYNTAX Counter64 1848 | MAX-ACCESS read-only 1849 | STATUS current 1850 | DESCRIPTION 1851 | "Packets dropped: Maximal aggregate RED threshold reached" 1852 | ::= { panGlobalCountersDOSCounters 21 } 1853 | 1854 | panFlowDosRuleDeny OBJECT-TYPE 1855 | SYNTAX Counter64 1856 | MAX-ACCESS read-only 1857 | STATUS current 1858 | DESCRIPTION 1859 | "Packets dropped: Denied action by DoS policy" 1860 | ::= { panGlobalCountersDOSCounters 22 } 1861 | 1862 | panFlowDosRuleDrop OBJECT-TYPE 1863 | SYNTAX Counter64 1864 | MAX-ACCESS read-only 1865 | STATUS current 1866 | DESCRIPTION 1867 | "Packets dropped: Rate limited or IP blocked" 1868 | ::= { panGlobalCountersDOSCounters 23 } 1869 | 1870 | panFlowDosRuleDropAggr OBJECT-TYPE 1871 | SYNTAX Counter64 1872 | MAX-ACCESS read-only 1873 | STATUS current 1874 | DESCRIPTION 1875 | "Packets dropped: due to aggregate rate limiting" 1876 | ::= { panGlobalCountersDOSCounters 24 } 1877 | 1878 | panFlowDosRuleDropClBlkDur OBJECT-TYPE 1879 | SYNTAX Counter64 1880 | MAX-ACCESS read-only 1881 | STATUS current 1882 | DESCRIPTION 1883 | "Packets dropped: Flagged for blocking and under block duration for cl" 1884 | ::= { panGlobalCountersDOSCounters 25 } 1885 | 1886 | panFlowDosRuleDropClRedAct OBJECT-TYPE 1887 | SYNTAX Counter64 1888 | MAX-ACCESS read-only 1889 | STATUS current 1890 | DESCRIPTION 1891 | "Packets dropped: Activate classified RED threshold reached, random ea" 1892 | ::= { panGlobalCountersDOSCounters 26 } 1893 | 1894 | panFlowDosRuleDropClRedMax OBJECT-TYPE 1895 | SYNTAX Counter64 1896 | MAX-ACCESS read-only 1897 | STATUS current 1898 | DESCRIPTION 1899 | "Packets dropped: Maximal classified RED threshold reached" 1900 | ::= { panGlobalCountersDOSCounters 27 } 1901 | 1902 | panFlowDosRuleDropClassified OBJECT-TYPE 1903 | SYNTAX Counter64 1904 | MAX-ACCESS read-only 1905 | STATUS current 1906 | DESCRIPTION 1907 | "Packets dropped: due to classified rate limiting" 1908 | ::= { panGlobalCountersDOSCounters 28 } 1909 | 1910 | panFlowDosSyncookieBlkDur OBJECT-TYPE 1911 | SYNTAX Counter64 1912 | MAX-ACCESS read-only 1913 | STATUS current 1914 | DESCRIPTION 1915 | "Packets dropped: Flagged for blocking and under block duration for ag" 1916 | ::= { panGlobalCountersDOSCounters 29 } 1917 | 1918 | panFlowDosSyncookieMax OBJECT-TYPE 1919 | SYNTAX Counter64 1920 | MAX-ACCESS read-only 1921 | STATUS current 1922 | DESCRIPTION 1923 | "Packet dropped: SYN cookies maximum threshold reached, aggregate prof" 1924 | ::= { panGlobalCountersDOSCounters 30 } 1925 | 1926 | panFlowDosZoneRedAct OBJECT-TYPE 1927 | SYNTAX Counter64 1928 | MAX-ACCESS read-only 1929 | STATUS current 1930 | DESCRIPTION 1931 | "Packets dropped: Activate zone RED threshold reached, random early dr" 1932 | ::= { panGlobalCountersDOSCounters 31 } 1933 | 1934 | panFlowDosZoneRedMax OBJECT-TYPE 1935 | SYNTAX Counter64 1936 | MAX-ACCESS read-only 1937 | STATUS current 1938 | DESCRIPTION 1939 | "Packets dropped: Maximal zone RED threshold reached" 1940 | ::= { panGlobalCountersDOSCounters 32 } 1941 | 1942 | panFlowDosBlkSwEntries OBJECT-TYPE 1943 | SYNTAX Counter64 1944 | MAX-ACCESS read-only 1945 | STATUS current 1946 | DESCRIPTION 1947 | "Number of entries in DOS Software block table" 1948 | ::= { panGlobalCountersDOSCounters 33 } 1949 | 1950 | panFlowDosBlkHwEntries OBJECT-TYPE 1951 | SYNTAX Counter64 1952 | MAX-ACCESS read-only 1953 | STATUS current 1954 | DESCRIPTION 1955 | "Number of entries in DOS Hardware block table" 1956 | ::= { panGlobalCountersDOSCounters 34 } 1957 | 1958 | panFlowDosSyncookieNotTcpSyn OBJECT-TYPE 1959 | SYNTAX Counter64 1960 | MAX-ACCESS read-only 1961 | STATUS current 1962 | DESCRIPTION 1963 | "TCP SYN cookies:TCP SYN cookie not SYN" 1964 | ::= { panGlobalCountersDOSCounters 35 } 1965 | 1966 | panFlowDosSyncookieNotTcpSynAck OBJECT-TYPE 1967 | SYNTAX Counter64 1968 | MAX-ACCESS read-only 1969 | STATUS current 1970 | DESCRIPTION 1971 | "TCP SYN cookies:TCP SYN cookie not SYN-ACK" 1972 | ::= { panGlobalCountersDOSCounters 36 } 1973 | 1974 | panFlowDosPfIpspoof OBJECT-TYPE 1975 | SYNTAX Counter64 1976 | MAX-ACCESS read-only 1977 | STATUS current 1978 | DESCRIPTION 1979 | "Packets dropped:Zone protection option 'discard-ip-spoof'" 1980 | ::= { panGlobalCountersDOSCounters 37 } 1981 | 1982 | panFlowDosPfIpfrag OBJECT-TYPE 1983 | SYNTAX Counter64 1984 | MAX-ACCESS read-only 1985 | STATUS current 1986 | DESCRIPTION 1987 | "Packets dropped:Zone protection option 'discard-ip-frag'" 1988 | ::= { panGlobalCountersDOSCounters 38 } 1989 | 1990 | panFlowDosPfPing0 OBJECT-TYPE 1991 | SYNTAX Counter64 1992 | MAX-ACCESS read-only 1993 | STATUS current 1994 | DESCRIPTION 1995 | "Packets dropped:Zone protection option 'discard-icmp-ping-zero-id'" 1996 | ::= { panGlobalCountersDOSCounters 39 } 1997 | 1998 | panFlowDosPfIcmpfrag OBJECT-TYPE 1999 | SYNTAX Counter64 2000 | MAX-ACCESS read-only 2001 | STATUS current 2002 | DESCRIPTION 2003 | "Packets dropped:Zone protection option 'discard-icmp-frag'" 2004 | ::= { panGlobalCountersDOSCounters 40 } 2005 | 2006 | panFlowDosPfIcmplpkt OBJECT-TYPE 2007 | SYNTAX Counter64 2008 | MAX-ACCESS read-only 2009 | STATUS current 2010 | DESCRIPTION 2011 | "Packets dropped:Zone protection option 'discard-icmp-large-packet'" 2012 | ::= { panGlobalCountersDOSCounters 41 } 2013 | 2014 | panFlowDosPfIcmperr OBJECT-TYPE 2015 | SYNTAX Counter64 2016 | MAX-ACCESS read-only 2017 | STATUS current 2018 | DESCRIPTION 2019 | "Packets dropped:Zone protection option 'discard-icmp-error'" 2020 | ::= { panGlobalCountersDOSCounters 42 } 2021 | 2022 | panFlowDosPfNoreplyttl OBJECT-TYPE 2023 | SYNTAX Counter64 2024 | MAX-ACCESS read-only 2025 | STATUS current 2026 | DESCRIPTION 2027 | "Packets dropped:Zone protection option 'suppress-icmp-timeexceeded'" 2028 | ::= { panGlobalCountersDOSCounters 43 } 2029 | 2030 | panFlowDosPfNoreplyneedfrag OBJECT-TYPE 2031 | SYNTAX Counter64 2032 | MAX-ACCESS read-only 2033 | STATUS current 2034 | DESCRIPTION 2035 | "Packets dropped:Zone protection option 'suppress-icmp-needfrag'" 2036 | ::= { panGlobalCountersDOSCounters 44 } 2037 | 2038 | panFlowDosPfStrictsource OBJECT-TYPE 2039 | SYNTAX Counter64 2040 | MAX-ACCESS read-only 2041 | STATUS current 2042 | DESCRIPTION 2043 | "Packets dropped:Zone protection option 'discard-strict-source-routing'" 2044 | ::= { panGlobalCountersDOSCounters 45 } 2045 | 2046 | panFlowDosPfLoosesource OBJECT-TYPE 2047 | SYNTAX Counter64 2048 | MAX-ACCESS read-only 2049 | STATUS current 2050 | DESCRIPTION 2051 | "Packets dropped:Zone protection option 'discard-loose-source-routing'" 2052 | ::= { panGlobalCountersDOSCounters 46 } 2053 | 2054 | panFlowDosPfTimestamp OBJECT-TYPE 2055 | SYNTAX Counter64 2056 | MAX-ACCESS read-only 2057 | STATUS current 2058 | DESCRIPTION 2059 | "Packets dropped:Zone protection option 'discard-timestamp'" 2060 | ::= { panGlobalCountersDOSCounters 47 } 2061 | 2062 | panFlowDosPfRecordroute OBJECT-TYPE 2063 | SYNTAX Counter64 2064 | MAX-ACCESS read-only 2065 | STATUS current 2066 | DESCRIPTION 2067 | "Packets dropped:Zone protection option 'discard-record-route'" 2068 | ::= { panGlobalCountersDOSCounters 48 } 2069 | 2070 | panFlowDosPfSecurity OBJECT-TYPE 2071 | SYNTAX Counter64 2072 | MAX-ACCESS read-only 2073 | STATUS current 2074 | DESCRIPTION 2075 | "Packets dropped:Zone protection option 'discard-security'" 2076 | ::= { panGlobalCountersDOSCounters 49 } 2077 | 2078 | panFlowDosPfSatnetid OBJECT-TYPE 2079 | SYNTAX Counter64 2080 | MAX-ACCESS read-only 2081 | STATUS current 2082 | DESCRIPTION 2083 | "Packets dropped:Zone protection option 'discard-stream-id'" 2084 | ::= { panGlobalCountersDOSCounters 50 } 2085 | 2086 | panFlowDosPfUnknown OBJECT-TYPE 2087 | SYNTAX Counter64 2088 | MAX-ACCESS read-only 2089 | STATUS current 2090 | DESCRIPTION 2091 | "Packets dropped:Zone protection option 'discard-unknown-option'" 2092 | ::= { panGlobalCountersDOSCounters 51 } 2093 | 2094 | panFlowDosPfBadoption OBJECT-TYPE 2095 | SYNTAX Counter64 2096 | MAX-ACCESS read-only 2097 | STATUS current 2098 | DESCRIPTION 2099 | "Packets dropped:Zone protection option 'discard-malformed-option'" 2100 | ::= { panGlobalCountersDOSCounters 52 } 2101 | 2102 | panFlowDosPfTcpoverlappingmismatch OBJECT-TYPE 2103 | SYNTAX Counter64 2104 | MAX-ACCESS read-only 2105 | STATUS current 2106 | DESCRIPTION 2107 | "Packets dropped:Zone protection option 'discard-overlapping-tcp-segment-mismatch'" 2108 | ::= { panGlobalCountersDOSCounters 53 } 2109 | 2110 | panFlowDosPfStrictip OBJECT-TYPE 2111 | SYNTAX Counter64 2112 | MAX-ACCESS read-only 2113 | STATUS current 2114 | DESCRIPTION 2115 | "Packets dropped:Zone protection option 'strict-ip-check'" 2116 | ::= { panGlobalCountersDOSCounters 54 } 2117 | 2118 | panFlowDosPfTcpsplithandshake OBJECT-TYPE 2119 | SYNTAX Counter64 2120 | MAX-ACCESS read-only 2121 | STATUS current 2122 | DESCRIPTION 2123 | "Packets dropped:Zone protection option 'discard-tcp-split-handshake'" 2124 | ::= { panGlobalCountersDOSCounters 55 } 2125 | 2126 | panFlowDosPfTcpsyndata OBJECT-TYPE 2127 | SYNTAX Counter64 2128 | MAX-ACCESS read-only 2129 | STATUS current 2130 | DESCRIPTION 2131 | "Packets dropped:Zone protection option 'discard-tcp-syn-with-data'" 2132 | ::= { panGlobalCountersDOSCounters 56 } 2133 | 2134 | panFlowDosPfTcpsynackdata OBJECT-TYPE 2135 | SYNTAX Counter64 2136 | MAX-ACCESS read-only 2137 | STATUS current 2138 | DESCRIPTION 2139 | "Packets dropped:Zone protection option 'discard-tcp-synack-with-data'" 2140 | ::= { panGlobalCountersDOSCounters 57 } 2141 | 2142 | panFlowDosIp6Route0 OBJECT-TYPE 2143 | SYNTAX Counter64 2144 | MAX-ACCESS read-only 2145 | STATUS current 2146 | DESCRIPTION 2147 | "Packets dropped:Zone protection option 'routing-header-0'" 2148 | ::= { panGlobalCountersDOSCounters 58 } 2149 | 2150 | panFlowDosIp6Route1 OBJECT-TYPE 2151 | SYNTAX Counter64 2152 | MAX-ACCESS read-only 2153 | STATUS current 2154 | DESCRIPTION 2155 | "Packets dropped:Zone protection option 'routing-header-1'" 2156 | ::= { panGlobalCountersDOSCounters 59 } 2157 | 2158 | panFlowDosIp6Route3 OBJECT-TYPE 2159 | SYNTAX Counter64 2160 | MAX-ACCESS read-only 2161 | STATUS current 2162 | DESCRIPTION 2163 | "Packets dropped:Zone protection option 'routing-header-3'" 2164 | ::= { panGlobalCountersDOSCounters 60 } 2165 | 2166 | panFlowDosIp6Route4to252 OBJECT-TYPE 2167 | SYNTAX Counter64 2168 | MAX-ACCESS read-only 2169 | STATUS current 2170 | DESCRIPTION 2171 | "Packets dropped:Zone protection option 'routing-header-4-252'" 2172 | ::= { panGlobalCountersDOSCounters 61 } 2173 | 2174 | panFlowDosIp6Route253 OBJECT-TYPE 2175 | SYNTAX Counter64 2176 | MAX-ACCESS read-only 2177 | STATUS current 2178 | DESCRIPTION 2179 | "Packets dropped:Zone protection option 'routing-header-253'" 2180 | ::= { panGlobalCountersDOSCounters 62 } 2181 | 2182 | panFlowDosIp6Route254 OBJECT-TYPE 2183 | SYNTAX Counter64 2184 | MAX-ACCESS read-only 2185 | STATUS current 2186 | DESCRIPTION 2187 | "Packets dropped:Zone protection option 'routing-header-254'" 2188 | ::= { panGlobalCountersDOSCounters 63 } 2189 | 2190 | panFlowDosIp6Route255 OBJECT-TYPE 2191 | SYNTAX Counter64 2192 | MAX-ACCESS read-only 2193 | STATUS current 2194 | DESCRIPTION 2195 | "Packets dropped:Zone protection option 'routing-header-255'" 2196 | ::= { panGlobalCountersDOSCounters 64 } 2197 | 2198 | panFlowDosIp6Ip4cmpt OBJECT-TYPE 2199 | SYNTAX Counter64 2200 | MAX-ACCESS read-only 2201 | STATUS current 2202 | DESCRIPTION 2203 | "Packets dropped:Zone protection option 'ipv4-compatible-address'" 2204 | ::= { panGlobalCountersDOSCounters 65 } 2205 | 2206 | panFlowDosIp6Acast OBJECT-TYPE 2207 | SYNTAX Counter64 2208 | MAX-ACCESS read-only 2209 | STATUS current 2210 | DESCRIPTION 2211 | "Packets dropped:Zone protection option 'anycast-source'" 2212 | ::= { panGlobalCountersDOSCounters 66 } 2213 | 2214 | panFlowDosIp6OptionsInvalidIPv6 OBJECT-TYPE 2215 | SYNTAX Counter64 2216 | MAX-ACCESS read-only 2217 | STATUS current 2218 | DESCRIPTION 2219 | "Packets dropped:Zone protection option 'options-invalid-ipv6-discard'" 2220 | ::= { panGlobalCountersDOSCounters 67 } 2221 | 2222 | panFlowDosIp6Icmpv6ErrorInvalid OBJECT-TYPE 2223 | SYNTAX Counter64 2224 | MAX-ACCESS read-only 2225 | STATUS current 2226 | DESCRIPTION 2227 | "Packets dropped:Zone protection option 'icmpv6-too-big-small-mtu-discard'" 2228 | ::= { panGlobalCountersDOSCounters 68 } 2229 | 2230 | panFlowDosIp6NeedlessIpv6FragHdr OBJECT-TYPE 2231 | SYNTAX Counter64 2232 | MAX-ACCESS read-only 2233 | STATUS current 2234 | DESCRIPTION 2235 | "Packets dropped:Zone protection option 'needless-fragment-hdr'" 2236 | ::= { panGlobalCountersDOSCounters 69 } 2237 | 2238 | panFlowDosIp6RsvdSet OBJECT-TYPE 2239 | SYNTAX Counter64 2240 | MAX-ACCESS read-only 2241 | STATUS current 2242 | DESCRIPTION 2243 | "Packets dropped:Zone protection option 'reserved-field-set-discard'" 2244 | ::= { panGlobalCountersDOSCounters 70 } 2245 | 2246 | panFlowDosIPv6ExtHdrHopByHop OBJECT-TYPE 2247 | SYNTAX Counter64 2248 | MAX-ACCESS read-only 2249 | STATUS current 2250 | DESCRIPTION 2251 | "Packets dropped:Zone protection option 'hop-by-hop-hdr'" 2252 | ::= { panGlobalCountersDOSCounters 71 } 2253 | 2254 | panFlowDosip6IPv6ExtHdrRouting OBJECT-TYPE 2255 | SYNTAX Counter64 2256 | MAX-ACCESS read-only 2257 | STATUS current 2258 | DESCRIPTION 2259 | "Packets dropped:Zone protection option 'routing-hdr'" 2260 | ::= { panGlobalCountersDOSCounters 72 } 2261 | 2262 | panFlowDosIp6IPv6ExtHdrDestOpt OBJECT-TYPE 2263 | SYNTAX Counter64 2264 | MAX-ACCESS read-only 2265 | STATUS current 2266 | DESCRIPTION 2267 | "Packets dropped:Zone protection option 'dest-option-hdr'" 2268 | ::= { panGlobalCountersDOSCounters 73 } 2269 | 2270 | panFlowDosPbpDrop OBJECT-TYPE 2271 | SYNTAX Counter64 2272 | MAX-ACCESS read-only 2273 | STATUS current 2274 | DESCRIPTION 2275 | "Packets dropped:Dropped by packet buffer protection RED" 2276 | ::= { panGlobalCountersDOSCounters 74 } 2277 | 2278 | panFlowDosCurrSessIncrFailed OBJECT-TYPE 2279 | SYNTAX Counter64 2280 | MAX-ACCESS read-only 2281 | STATUS current 2282 | DESCRIPTION 2283 | "Unable to increment current session count on session create" 2284 | ::= { panGlobalCountersDOSCounters 75 } 2285 | 2286 | panFlowDosCurrSessDecrFailed OBJECT-TYPE 2287 | SYNTAX Counter64 2288 | MAX-ACCESS read-only 2289 | STATUS current 2290 | DESCRIPTION 2291 | "Unable to decrement current session count on session delete" 2292 | ::= { panGlobalCountersDOSCounters 76 } 2293 | 2294 | 2295 | ------------------------------------------------------------------------------------------------------- 2296 | -- Pan Global Drop Counters 2297 | 2298 | panFlowFwdL3TtlZero OBJECT-TYPE 2299 | SYNTAX Counter64 2300 | MAX-ACCESS read-only 2301 | STATUS current 2302 | DESCRIPTION 2303 | "Packets dropped: IP TTL reaches zero" 2304 | ::= { panGlobalCountersDropCounters 1 } 2305 | 2306 | panFlowMeterHostThrottle OBJECT-TYPE 2307 | SYNTAX Counter64 2308 | MAX-ACCESS read-only 2309 | STATUS current 2310 | DESCRIPTION 2311 | "Session metering: sessions throttled by management session threshold" 2312 | ::= { panGlobalCountersDropCounters 2 } 2313 | 2314 | panFlowHostServiceDeny OBJECT-TYPE 2315 | SYNTAX Counter64 2316 | MAX-ACCESS read-only 2317 | STATUS current 2318 | DESCRIPTION 2319 | "Device management session denied" 2320 | ::= { panGlobalCountersDropCounters 3 } 2321 | 2322 | panFlowHostServiceUnknown OBJECT-TYPE 2323 | SYNTAX Counter64 2324 | MAX-ACCESS read-only 2325 | STATUS current 2326 | DESCRIPTION 2327 | "Session discarded: unknown application to control plane" 2328 | ::= { panGlobalCountersDropCounters 4 } 2329 | 2330 | panPktAllocFailure OBJECT-TYPE 2331 | SYNTAX Counter64 2332 | MAX-ACCESS read-only 2333 | STATUS current 2334 | DESCRIPTION 2335 | "Packet allocation error" 2336 | ::= { panGlobalCountersDropCounters 5 } 2337 | 2338 | panPktAllocFailureCos OBJECT-TYPE 2339 | SYNTAX Counter64 2340 | MAX-ACCESS read-only 2341 | STATUS current 2342 | DESCRIPTION 2343 | "Packet allocation error due to QoS control" 2344 | ::= { panGlobalCountersDropCounters 6 } 2345 | 2346 | panSessionDiscard OBJECT-TYPE 2347 | SYNTAX Counter64 2348 | MAX-ACCESS read-only 2349 | STATUS current 2350 | DESCRIPTION 2351 | "Session set to discard by security policy check" 2352 | ::= { panGlobalCountersDropCounters 7 } 2353 | 2354 | ------------------------------------------------------------------------------------------------------ 2355 | -- Pan Global IPFragmentation Counters 2356 | 2357 | panFlowIpfragFragErr OBJECT-TYPE 2358 | SYNTAX Counter64 2359 | MAX-ACCESS read-only 2360 | STATUS current 2361 | DESCRIPTION 2362 | "Packet dropped: IP fragmentation error" 2363 | ::= { panGlobalCountersIPFragmentationCounters 1 } 2364 | 2365 | panFlowIpfragRecv OBJECT-TYPE 2366 | SYNTAX Counter64 2367 | MAX-ACCESS read-only 2368 | STATUS current 2369 | DESCRIPTION 2370 | "IP fragments received" 2371 | ::= { panGlobalCountersIPFragmentationCounters 2 } 2372 | 2373 | ------------------------------------------------------------------------------------------------------ 2374 | -- Pan Global TCP State Counters 2375 | 2376 | panTcpAllocWqeFailed OBJECT-TYPE 2377 | SYNTAX Counter64 2378 | MAX-ACCESS read-only 2379 | STATUS current 2380 | DESCRIPTION 2381 | "wqe allocation failure in tcp" 2382 | ::= { panGlobalCountersTCPState 1 } 2383 | 2384 | panTcpDeny OBJECT-TYPE 2385 | SYNTAX Counter64 2386 | MAX-ACCESS read-only 2387 | STATUS current 2388 | DESCRIPTION 2389 | "session denied because of failure in tcp reassembly" 2390 | ::= { panGlobalCountersTCPState 2 } 2391 | 2392 | panTcpDropOutOfWnd OBJECT-TYPE 2393 | SYNTAX Counter64 2394 | MAX-ACCESS read-only 2395 | STATUS current 2396 | DESCRIPTION 2397 | "out-of-window packets dropped" 2398 | ::= { panGlobalCountersTCPState 3 } 2399 | 2400 | panTcpDropPacket OBJECT-TYPE 2401 | SYNTAX Counter64 2402 | MAX-ACCESS read-only 2403 | STATUS current 2404 | DESCRIPTION 2405 | "packets dropped because of failure in tcp reassembly" 2406 | ::= { panGlobalCountersTCPState 4 } 2407 | 2408 | panFlowActionClose OBJECT-TYPE 2409 | SYNTAX Counter64 2410 | MAX-ACCESS read-only 2411 | STATUS current 2412 | DESCRIPTION 2413 | "TCP sessions closed via injecting RST" 2414 | ::= { panGlobalCountersTCPState 5 } 2415 | 2416 | panFlowActionReset OBJECT-TYPE 2417 | SYNTAX Counter64 2418 | MAX-ACCESS read-only 2419 | STATUS current 2420 | DESCRIPTION 2421 | "TCP clients reset via responding RST" 2422 | ::= { panGlobalCountersTCPState 6 } 2423 | 2424 | panFlowTcpNonSyn OBJECT-TYPE 2425 | SYNTAX Counter64 2426 | MAX-ACCESS read-only 2427 | STATUS current 2428 | DESCRIPTION 2429 | "Non-SYN TCP packets without session match" 2430 | ::= { panGlobalCountersTCPState 7 } 2431 | 2432 | 2433 | panTcpExceedSegLimit OBJECT-TYPE 2434 | SYNTAX Counter64 2435 | MAX-ACCESS read-only 2436 | STATUS current 2437 | DESCRIPTION 2438 | "packets dropped due to the limitation on global tcp out-of-order pack" 2439 | ::= { panGlobalCountersTCPState 8 } 2440 | 2441 | ------------------------------------------------------------------------------------------------------ 2442 | -- Pan Global Tunnel State Counters 2443 | 2444 | panFlowTciGreDecapSuccess OBJECT-TYPE 2445 | SYNTAX Counter64 2446 | MAX-ACCESS read-only 2447 | STATUS current 2448 | DESCRIPTION 2449 | "Total GRE sessions tunnel inspected" 2450 | ::= { panGlobalCountersTunnelInspect 1 } 2451 | 2452 | panFlowTciGreDecapFailed OBJECT-TYPE 2453 | SYNTAX Counter64 2454 | MAX-ACCESS read-only 2455 | STATUS current 2456 | DESCRIPTION 2457 | "Total GRE sessions for failed tunnel inspected" 2458 | ::= { panGlobalCountersTunnelInspect 2 } 2459 | 2460 | panFlowTciGreDecapUnknown OBJECT-TYPE 2461 | SYNTAX Counter64 2462 | MAX-ACCESS read-only 2463 | STATUS current 2464 | DESCRIPTION 2465 | "Total unknown tunnel inspection packets in GRE tunnel [passed|dropped]" 2466 | ::= { panGlobalCountersTunnelInspect 3 } 2467 | 2468 | panFlowTciIpsecDecapSuccess OBJECT-TYPE 2469 | SYNTAX Counter64 2470 | MAX-ACCESS read-only 2471 | STATUS current 2472 | DESCRIPTION 2473 | "Total Ipsec sessions tunnel inspected" 2474 | ::= { panGlobalCountersTunnelInspect 4 } 2475 | 2476 | panFlowTciIpsecDecapFailed OBJECT-TYPE 2477 | SYNTAX Counter64 2478 | MAX-ACCESS read-only 2479 | STATUS current 2480 | DESCRIPTION 2481 | "Total IPSEC sessions for failed tunnel inspected" 2482 | ::= { panGlobalCountersTunnelInspect 5 } 2483 | 2484 | panFlowTciIpsecDecapUnknown OBJECT-TYPE 2485 | SYNTAX Counter64 2486 | MAX-ACCESS read-only 2487 | STATUS current 2488 | DESCRIPTION 2489 | "Total unknown tunnel inspection packets in IPSEC tunnel [passed|dropped]" 2490 | ::= { panGlobalCountersTunnelInspect 6 } 2491 | 2492 | panFlowTciGtpDecapSuccess OBJECT-TYPE 2493 | SYNTAX Counter64 2494 | MAX-ACCESS read-only 2495 | STATUS current 2496 | DESCRIPTION 2497 | "Total GTP sessions tunnel inspected" 2498 | ::= { panGlobalCountersTunnelInspect 7 } 2499 | 2500 | panFlowTciGtpDecapFailed OBJECT-TYPE 2501 | SYNTAX Counter64 2502 | MAX-ACCESS read-only 2503 | STATUS current 2504 | DESCRIPTION 2505 | "Total GTP sessions for failed tunnel inspected" 2506 | ::= { panGlobalCountersTunnelInspect 8 } 2507 | 2508 | panFlowTciGtpDecapUnknown OBJECT-TYPE 2509 | SYNTAX Counter64 2510 | MAX-ACCESS read-only 2511 | STATUS current 2512 | DESCRIPTION 2513 | "Total unknown tunnel inspection packets in GTP tunnel[passed|dropped]" 2514 | ::= { panGlobalCountersTunnelInspect 9 } 2515 | 2516 | --------------------------------------------------------------- 2517 | -- panIfTable 2518 | 2519 | panIfEntry OBJECT-TYPE 2520 | SYNTAX PanIfEntry 2521 | MAX-ACCESS not-accessible 2522 | STATUS current 2523 | DESCRIPTION 2524 | "Entries are created when panIfCPS are added to the panIfCPSTable." 2525 | INDEX { ifIndex } 2526 | ::= { panIfTable 1 } 2527 | 2528 | PanIfEntry ::= SEQUENCE { 2529 | ifIndex Unsigned32, 2530 | ifDescr DisplayString, 2531 | panIfActiveTcpCps Unsigned32, 2532 | panIfActiveUdpCps Unsigned32, 2533 | panIfActiveOtherIpCps Unsigned32 2534 | } 2535 | 2536 | ifIndex OBJECT-TYPE 2537 | SYNTAX Unsigned32 2538 | MAX-ACCESS read-only 2539 | STATUS current 2540 | DESCRIPTION 2541 | "Index of the interface" 2542 | ::= { panIfEntry 1 } 2543 | 2544 | ifDescr OBJECT-TYPE 2545 | SYNTAX DisplayString 2546 | MAX-ACCESS read-only 2547 | STATUS current 2548 | DESCRIPTION 2549 | "Description (name) of the interface" 2550 | ::= { panIfEntry 2 } 2551 | 2552 | panIfActiveTcpCps OBJECT-TYPE 2553 | SYNTAX Unsigned32 2554 | MAX-ACCESS read-only 2555 | STATUS current 2556 | DESCRIPTION 2557 | "Number of active TCP connections per second for this interface." 2558 | ::= { panIfEntry 3 } 2559 | 2560 | panIfActiveUdpCps OBJECT-TYPE 2561 | SYNTAX Unsigned32 2562 | MAX-ACCESS read-only 2563 | STATUS current 2564 | DESCRIPTION 2565 | "Number of active UDP connections per second for this interface." 2566 | ::= { panIfEntry 4 } 2567 | 2568 | panIfActiveOtherIpCps OBJECT-TYPE 2569 | SYNTAX Unsigned32 2570 | MAX-ACCESS read-only 2571 | STATUS current 2572 | DESCRIPTION 2573 | "Number of active Other IP connections per second for this interface." 2574 | ::= { panIfEntry 5 } 2575 | 2576 | --------------------------------------------------------------- 2577 | -- panZoneTable 2578 | 2579 | panZoneEntry OBJECT-TYPE 2580 | SYNTAX PanZoneEntry 2581 | MAX-ACCESS not-accessible 2582 | STATUS current 2583 | DESCRIPTION 2584 | "Entries are created when panZoneCPS are added to the panZoneCPSTable." 2585 | INDEX { ifIndex } 2586 | ::= { panZoneTable 1 } 2587 | 2588 | PanZoneEntry ::= SEQUENCE { 2589 | panZoneName DisplayString, 2590 | panZoneActiveTcpCps Unsigned32, 2591 | panZoneActiveUdpCps Unsigned32, 2592 | panZoneActiveOtherIpCps Unsigned32 2593 | } 2594 | 2595 | panZoneName OBJECT-TYPE 2596 | SYNTAX DisplayString 2597 | MAX-ACCESS read-only 2598 | STATUS current 2599 | DESCRIPTION 2600 | "Zone name for the interface" 2601 | ::= { panZoneEntry 1 } 2602 | 2603 | panZoneActiveTcpCps OBJECT-TYPE 2604 | SYNTAX Unsigned32 2605 | MAX-ACCESS read-only 2606 | STATUS current 2607 | DESCRIPTION 2608 | "Number of active TCP connections per second for this zone." 2609 | ::= { panZoneEntry 2 } 2610 | 2611 | panZoneActiveUdpCps OBJECT-TYPE 2612 | SYNTAX Unsigned32 2613 | MAX-ACCESS read-only 2614 | STATUS current 2615 | DESCRIPTION 2616 | "Number of active UDP connections per second for this zone." 2617 | ::= { panZoneEntry 3 } 2618 | 2619 | panZoneActiveOtherIpCps OBJECT-TYPE 2620 | SYNTAX Unsigned32 2621 | MAX-ACCESS read-only 2622 | STATUS current 2623 | DESCRIPTION 2624 | "Number of active Other IP connections per second for this zone." 2625 | ::= { panZoneEntry 4 } 2626 | 2627 | 2628 | -------------------------------------------------------------------------------------------------------- 2629 | END 2630 | --------------------------------------------------------------------------------