icmp & snmp allowed but interfaces still in unknown state

Question

Hia,

I'm trying to monitor a fortigate firewall from NPM and we have an access list between the 2 if I allow IP everything works fine but if I only allow icmp & snmp the ports all report as unknown and we get no stats, the device stays reporting as up whihc is the icmp bit I presume.

Is there something else I need to add as well as icmp and snmp?

Thanks,

Steve.

chris.conway · Answer

Maybe you have the direction of traffic wrong?

UDP Port 161 is for polling the interface status plus other info
UDP Port 162 is for SNMP Traps which are outbound traffic

So your rules should be

Allow SNMP (UDP 161) from Orion to Firewall
Allow SNMP Traps (UDP 162) from Firewall to Orion

Also, I know on some firewalls you have to specify hosts which are allowed SNMP access. Do you need to set this up as well?

worto03 · Answer

now for the SNMP i think it is ports 161 and 162 for it just make sure you are choosing UDP for it.

Yeah thats what I thought but with both ports (udp 161 & udp 162) allowed through it still shows all the ports as unknown unless we allow ip

hummmmm......

worto.

FormerMember · Answer

if you are getting the ICMP status sounds like you have that part fixed.

now for the SNMP i think it is ports 161 and 162 for it just make sure you are choosing UDP for it.