nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
- SolarWinds Academy
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Checkpoint VSX Monitor

thangaselvi

Any one monitoring checkpoint vsx virtual context via SNMPV3 ?

How to add the virtual nodes ?

Find more posts tagged with

npm

Comments

Deltona

Hi there,

There are three ways to monitor VSX.
SNMP Default mode
SNMP VS mode
SNMP VS in vs-direct access mode

REF: https://sc1.checkpoint.com/documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_VSX_AdminGuide/html_frameset.htm?topic=documents/R80.30SP/WebAdminGuides/EN/CP_R80.30SP_Maestro_VSX_AdminGuide/202203

The best way to monitor VSX in SWP is to go for the SNMP VS in vs-direct access mode, where you enable SNMP at vs0/vsx gateway and each virtual system can be accesses individually as nodes.

In vs0/vsx gateway, configure the following:

set snmp agent-version v3-Only
set snmp mode vs
add snmp usm user <username> security-level authPriv auth-pass-phrase <pass> privacy-pass-phrase <pass> privacy-protocol AES authentication-protocol SHA1
set snmp usm user <username> vsid all
set snmp vs-direct-access on
set snmp agent on
save config

Note: This enables an SNMP agent on each virtual system. If you only want to enable it on a specific system then replace the vsid all part with vsid 1,2,3 etc. Also note that SNMP will be enabled on all interfaces on each VS, not just the management interface. You should therefore update the security policy to only allow incoming SNMP (UDP 161) from your SWP server on the management interfaces.

Then add each VS as a new Node in SWP. You can monitor them using the same SNMP v3 credential.

If a VS is part of a cluster, then you will need to add the cluster virtual IP as a Node, not the individual VS IP, because you can't get SNMP access to a cluster member if it is not active. If you need to know whether the cluster members are available or not, then you could add the cluster members individually as ICMP-only Nodes in SWP. You would be pinging the cluster members for availability status and polling the cluster VIP for performance stats.

To get the performance stats that you need, use existing or build new Universal Device Pollers.

Quick Links

Dynamic Interface Dashboard; HTML/JS
I wanted to share a new dashboard a co-worker ( @mblackburn ) came up with to help us better view groups of interfaces and various metrics for each. Using a single HTML widget, we are able to visually compare numerous different interfaces by populating each interface dataset onto its own graph. We are able to view…
PALO-ALG - Logging
PALO-ALG - Logging.xmlPalo Alto Networks ALG Security Technical Implementation Guide :: Version 2, Release: 3 Benchmark Date: 27 Oct 2022
Alert HTML Content
Alert Cleared.htmlHello, I would like to share the HTML template details we have prepared so that Solarwinds alarms can become more meaningful. It can list alarm object details and connected device details separately in HTML template. Except for object and device details, you can easily add custom property information…
Cisco ASR Devices
Cisco ASR Devices.pollerCisco ASR Devices