I am trying to setup firewall failover alerting on the NPM alerts screen. I noticed that when a firewall failover event occurs Orion sees the change in the event log for a physical mac address change of the firewall. However, I configured alerting to notify me when any mac address changes on any device and when simulating the failover of a firewall to a secondary device the alert never goes off even though it is being detected in the Orion event log. I know the alert is working properly because I simulated changing a mac address and it fired off perfectly. Seems to be a disconnect specifically for that failover interface being able to trigger the physical mac address change alert.
Is there a better way to do this with MIB's?