Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Palo Alto Polling Credentials Text Box Anomaly

So I'm trying to get PA Network Insight Polling Credentials entered and the password box adds a large string after testing successfully.

When I hit submit, this obfuscated password fails and I get a warning,

I have tried multiple browsers to isolate, and it happens no matter what endpoint or browser I try.

Does anyone see the password test box add characters and its normal for you and all works?

This is really frustrating to say the least. I opened a support ticket as well.

Image 1 - Password field is updated with what I assume are random string characters to better obfuscate the password but it breaks when I hit submit in screenshot 2.

Find more posts tagged with

Comments

mdw0001

Ever have any luck solving this?

ralphpost

From memory when I was setting up monitoring for some PA devices.

When I got to the Node Edit page and selected the "Poll for Palo Alto" box - entered the credentials and hit Test, I got a pop-up box indicating Certificate issue with option to accept cert,

When I selected Accept - then the Password field updated with adding the random "dots" and clicking Test again then completed successfully.

I believe the "random character"/"random dots" are actually not random but the Cert Key (or similar) that is appended to the pw - without this the login won't be authorised.

Possibly your issues are the cert key being appended is incorrect - no idea how to fix that unfortunately.

MannyC

Has anyone figured this out. i have been fighting with this for a while. i even went and pulled the certs from the browser when logging into the web interface of the firewalls and importing them into my HCO on prem server. Palo Alto doesnt seem to play well with others (solarwinds) and their TAC is no help. Solar wasnt much help either. Does anyone know if the solar program on the server gets the certs from the server or does it have a repository for the cert in settings somewhere.

Kita

@MannyC There seems to be a underlying problem that we need to still address, but the following workaround has worked for several customers: https://support.solarwinds.com/SuccessCenter/s/article/Palo-Alto-Credentials-not-saved

If you have a support case, please feel free to share.

MannyC

I had a case opened a while back

their suggestion was to do an SNMPwalk and create custom pollers for the info i wanted to produce.

Kita

Custom poller would work, but would be manually. Please see if the workaround in the KCS article works. If not, I would advise open a support case to see if we can ensure we address this problem in the upcoming release.

hpstech

I gave up, couldn't get it to work. Support doc tried too.

MannyC

I feel your Pain, but not quite there yet. Plus there are no usable Thwack custom pollers that are any good for the PANs and working this problem is a lot easier than trying to create custom pollers for SNMP

Kita

@MannyC This should work in product. If someone is able to provide a case number, we can continue to try get this properly resolved for all.

Quick Links

Cisco ASR Devices
Cisco ASR Devices.pollerCisco ASR Devices
Basic SWQL Syntax
SWQL is built on the framework of SQL and as such supports most of the standard clauses as part of a query. A very simple example query is: SELECT Caption, IPAddress, Vendor, ResponseTime FROM Orion.Nodes Dissecting this query is relatively straightforward: show some fields (Caption, IP address, Vendor, and Response Time)…
Cisco ASA SSL Tunnels
Active SSL Tunnels-ASA.UnDPThis poller *should* display the number of Active SSL VPN (Anyconnect) Tunnels currently connected to your box. However, I tried it with my 5520 running 8.0.4 and for some reason I get a OID Not Supported. Here's my post in the forum: *EDIT* This is confirmed working with at least Interm release…
HP ProCurve Switches Hardening check
HP ProCurve Switches Hardening check.xmlGeneral hardening for HP switches