Palo Alto HA Firewall Failover Poller

Version 2

    This poller checks OID 1.3.6.1.4.1.25461.2.1.2.1.11, panSysHAState to detect if the target firewall is in active or passive mode.  This poller is intended to be used in conjunction with Advanced Alert Manager alerts which trigger based on the text value returned ("passive" or "active"). Use one alert for the primary peer of the HA pair using:

    Trigger when all of the following apply:

         Poller Name is equal to panSysHAState

         Value contains passive

     

    For an alert to trigger verifying that the secondary peer has become active apply the poller to the secondary firewall and use:

    Trigger when all of the following apply:

         Poller Name is equal to panSysHAState

         Value contains active

     

     

    Note that you may use 1.3.6.1.4.1.25461.2.1.2.1.12, panSysHAPeerState to check the state of the HA peer partner from the primary, but this will require 2 pollers and more complex alert logic.