cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post

Palo Alto HA Firewall Failover Poller

This poller checks OID 1.3.6.1.4.1.25461.2.1.2.1.11, panSysHAState to detect if the target firewall is in active or passive mode.  This poller is intended to be used in conjunction with Advanced Alert Manager alerts which trigger based on the text value returned ("passive" or "active"). Use one alert for the primary peer of the HA pair using:

Trigger when all of the following apply:

     Poller Name is equal to panSysHAState

     Value contains passive

For an alert to trigger verifying that the secondary peer has become active apply the poller to the secondary firewall and use:

Trigger when all of the following apply:

     Poller Name is equal to panSysHAState

     Value contains active

Note that you may use 1.3.6.1.4.1.25461.2.1.2.1.12, panSysHAPeerState to check the state of the HA peer partner from the primary, but this will require 2 pollers and more complex alert logic.

Attachments
Comments

Here is an easy to use guide to compliment Andy's hard work for those of you new to Solarwinds.

Custom Poller - Palo Alto Firewalls HA Status.pdf

This would require 2 separate alerts to be written, correct? One for active to passive and other for passive to active

CourtesyIT

Version history
Revision #:
1 of 1
Last update:
‎10-29-2014 03:34 PM
Updated by: