I need to build a report that shows which Palo Alto and Cisco ASA and firewalls have CLI polling enabled. I know this setting must be in the database tables somewhere, but danged if I can find it. Any ideas, anyone? Thanks!
brentbo something like the below query would be a good starting point for this
select n.Caption, n.IP, replace(ns.SettingName,'CLI.Credential','True') as [CLI Enabled] from orion.nodes n join orion.NodeSettings ns on n.NodeID=ns.NodeID where ns.SettingName like '%CLI.Cr%'
*EDIT*
this below one is for Palos
select n.Caption, n.IP, replace(ns.SettingName,'NetMan.Firewalls.PaloAlto.PollingEnabled','True') as [CLI Enabled] from orion.nodes n join orion.NodeSettings ns on n.NodeID=ns.NodeID where ns.SettingName like '%NetMan.Firewalls.PaloAlto.PollingEnabled%'
Made some changes to give the report for list of palo which doesn't have CLI enabled
SELECT caption,ip_address,vendor FROM [dbo].[NodesData] where vendor like'%palo%' and ip_address not in
(
select n.IP_address
from [dbo].[nodes] n
join [dbo].[NodeSettings] ns on n.NodeID=ns.NodeID
where ns.SettingName like '%NetMan.Firewalls.PaloAlto.PollingEnabled%'
)
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.