I need to build a report that shows which Palo Alto and Cisco ASA and firewalls have CLI polling enabled. I know this setting must be in the database tables somewhere, but danged if I can find it. Any ideas, anyone? Thanks!
@brentbo something like the below query would be a good starting point for this
select n.Caption, n.IP, replace(ns.SettingName,'CLI.Credential','True') as [CLI Enabled]from orion.nodes njoin orion.NodeSettings ns on n.NodeID=ns.NodeIDwhere ns.SettingName like '%CLI.Cr%'
*EDIT*
this below one is for Palos
select n.Caption, n.IP, replace(ns.SettingName,'NetMan.Firewalls.PaloAlto.PollingEnabled','True') as [CLI Enabled]from orion.nodes njoin orion.NodeSettings ns on n.NodeID=ns.NodeIDwhere ns.SettingName like '%NetMan.Firewalls.PaloAlto.PollingEnabled%'
Made some changes to give the report for list of palo which doesn't have CLI enabled
SELECT caption,ip_address,vendor FROM [dbo].[NodesData] where vendor like'%palo%' and ip_address not in(select n.IP_addressfrom [dbo].[nodes] njoin [dbo].[NodeSettings] ns on n.NodeID=ns.NodeIDwhere ns.SettingName like '%NetMan.Firewalls.PaloAlto.PollingEnabled%')