cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 8

Palo Alto alerting via Solarwinds for BGP/Dynamic routing

HI

   I need to be able to do some Dynamic routing alerting via solarwinds for Palo Alto firewalls in particular bgp peers if the it drops or flaps.  Is there a method of doing this via Solarwinds?

0 Kudos
6 Replies

All mine are running 7.1.11 at the moment. We have not made the jump to 8.x. SO there may be differences in the API constructs. I did not look.

0 Kudos

Ah ok, we have a few left on 7.1.10 but they are in the process of being upgraded. I will let you know what my outcome is

0 Kudos

mliveri​ 0 I have several Palo Altos and do some custom thing with them. I don't have BGP peers but I am interested in helping you solve this. What version of PAN OS are you running? KMSigma​ let me know about your question.

0 Kudos

Hi

  We are running PAN OS Version 8.0.4 and i will set up the api info that you have provided and test this procedure out. thanks so far.

0 Kudos

Specifically for the BGP peer status you might consider a HTTP/HTTPS monitor in Solarwinds and use the Palo Alto API. Then if it does not return the peer-status you expect in the XML response trigger an alert in SolarWinds.

Start on this page: Get Started with the PAN-OS XML API

pastedImage_1.pngpastedImage_2.pngpastedImage_3.png

You can construct a query that looks like this:

https://firewall.foobar.com/api/?type=op&cmd=%3Cshow%3E%3Crouting%3E%3Cprotocol%3E%3Cbgp%3E%3Cpeer%3... router name]%3C%2Fvirtual-router%3E%3C%2Fpeer%3E%3C%2Fbgp%3E%3C%2Fprotocol%3E%3C%2Frouting%3E%3C%2Fshow%3E&key=[account api key]

The response I get on my system is this because I have no peers:

pastedImage_4.png

The routing table can be retrieved similarly although I do not know of a good way to parse the XML and use it in SolarWInds. I am still looking into that. Mostly I have used this in other prorams I write to output the XML into a spreadsheet for others to use.

Here is the routing table API query:

https://firewall.foobar.com/api/?type=op&cmd=&%3Cshow%3E%3Crouting%3E%3Croute%3E%3Cvirtual-router%3E... router name]%3C%2Fvirtual-router%3E%3C%2Froute%3E%3C%2Frouting%3E%3C%2Fshow%3Ekey=[account api key]

The partial result looks like this:

pastedImage_5.png

0 Kudos

@tomiannelli 

 

Hi , Thanks for your post but still this is not resolving our issue to get monitor on BGP status and Power supply status of Palo alto devices by using API call from solarwinds. As we do not have SAM module we have only network monitoring modules in solarwinds.

 

How can we monitor by using API 

Power supply and BGP peer state Monitoring on Palo Alto devices 
0 Kudos