This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Palo Alto firewalls only showing the Management IP

bruce_jarrett over 7 years ago

My environment is http://www.solarwinds.com/Orion Platform 2016.1.5200, IPAM 4.3.1, NCM 7.5, IVIM 2.1.2, QoE 2.1.0, Toolset 11.0.1, NetPath 1.0, NPM 12.0, NTA 4.2.0, UDT 3.2.3

So I have the PA firewalls in my NPM and NCM environments just fine.

To do this I had to use the PA management interface to add it.

However, NPM is not showing the other IPs fo rthe other interfaces like my internal, external nor DMZ. So when I go to Net Path Services and I see my FW Internal and External IPs in the path it does not know that those are my FW and get the proper interface information.

My question is - is there anyway to fix this?

I know I can add a custom property to the interfaces and show the IPs but that does not integrate with the reset of the Solarwinds servers / products I have for dynamic linking.

Thank you,
Bruce Jarrett

0 mikesky over 7 years ago

Just ran into this myself on Palos running PANOS v6.1.9.
I wonder if it has been fixed in PANOS v7, based on this thread Palo Alto sub interfaces and this PA KB article Extended SNMP Support.
Hopefully I can get my customer to upgrade.
Cancel
Vote Up 0 Vote Down

Cancel
0 denstjames over 7 years ago in reply to mikesky

Yeah I still have this issue on PANOS 7.0.3.
I assume this an SNMP issue with the poller to solarwinds not a pan-os issue but I have no idea how to fix it. Any ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 moobys over 6 years ago in reply to mikesky

Issue still exists in PAN OS 8.0.7.
Cancel
Vote Up 0 Vote Down

Cancel
0 codeassassin over 4 years ago

Unfathomably, per my conversation with Palo Alto support via a ticket I opened, they do not support the industry standards snmp interface ip address value. You can see this for yourself if you attempt to do an snmp walk of all values returned by the palo alto, there is no value with the interface ip address. The only workaround would be if Solarwinds were to allow you to manually add the interface ip address, but they seem to refuse. I opened a ticket for such a thing and it was refused. You can see Solarwinds' punt on the issue in this article below:
Success Center
Cancel
Vote Up 0 Vote Down

Cancel
0 orionfan over 3 years ago in reply to codeassassin

Was this ever resolved? We have the same issue and we are running v9.1.8.
Cancel
Vote Up 0 Vote Down

Cancel