Monitoring Palo Alto Application & Threat Verison

spyfly

Has anyone have any luck monitoring a Palo Alto version's level such as Application, Threat, Antivirus, Wildfire, URL and Software.

We had an issue the other day where the Application and Threat Version got updated and starting blocking TLS traffic and it took us a few hours to figure this out and we have been asked if we can monitor the version levels of the above.

Thanks in advanced

chad.every

There are possibly a few ways you could check, all depends on how PA exposes the version numbers.

1) NPM: Custom Universal Device Poller. See if those versions are exposed via SNMP. I'd be surprised if they were since it's more of a security appliance.

2) NPM: See if PA can generate an SNMP trap when those get updated.

3) NCM: See if version numbers are available via the CLI/config and watch for changes.

4) SAM: If there is an API available for those PA's that you could reach into to view version numbers.