>
    Strata Copilot
    Configure SNMP
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Sites and Devices
    5. Use External Services for Monitoring
    6. Configure SNMP
    Download PDF
    Prisma SD-WAN

    Configure SNMP

    Table of Contents

    Configure SNMP

    Simple Network Management Protocol (SNMP), we have SNMP Agents and Traps in Prisma SD-WAN.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    SNMP Agents and Traps are disabled by default. To enable and configure SNMP Agent and Traps:
    In 6.x.x, the ifIndex is not persistent across datapath process restarts or reboots. Statistics should instead be referenced using the interface name (ifName).
    On lower-end platforms, the total interface count should not exceed 40–45 to prevent timeouts and performance degradation. For more information, see SNMP Monitoring Performance and Interface Density.
    SNMP configuration fields now enforce strict character validation to prevent parsing errors and command injection.
    The updated validation policy allows only the following characters:
    • Letters: a-z, A-Z.
    • Numbers: 0-9.
    • Symbols: !, @, #, %, ^, *, -, _, +, =, :, ., ,, ?, /, ~.
    The system rejects characters that interfere with command execution or scripting, such as semicolons (;), pipes (|), dollar signs ($), and backticks (`).
    Existing configurations with restricted characters continue to function. The system enforces the new validation rules only when you update or modify these settings.
    1. Select ConfigurationPrisma SD-WANION DevicesClaimed, select the device you want to configure.
    2. From the device configuration screen, select SNMP Config.
      The Agents/Traps screen displays.
    3. Configure an SNMP Agent. An SNMP Agent has read-only access.
      1. Click the Agent tab.
      2. Enter a Description and add (Optional) Tags.
      3. Select Enable V2 or Enable V3.
        Both may be enabled, but at least one must be enabled.
      4. Select Enable V2 to configure Community.
        If V2 is enabled, community can be configured. If community is not configured, then public will be set as the default community.
      5. Select Enable V3 to configure the User. If V3 is enabled, use the Add User option to add a user and define the user attributes.
        Enter a Username (Optional) Engine ID to identify the device, and select a Security Level from the drop-down.
        The security level NOAUTH indicates that no authentication is required, AUTH indicates the authentication type, and Private indicates the security level.
        Auth Type may be MD5, SHA, or None. If you select an authentication type, enter an authentication phrase of 8 to 25 characters. Encryption Type may be AES, DES, or None. If you select an encryption type, enter an encryption phrase of 8 to 25 characters.
      6. Click Save.
    4. Configure SNMP Traps.
      1. Click on the Traps tab and select Add Trap.
        To enable SNMP Trap, make sure the Disabled option is unchecked.
      2. Enter the SNMP server or manager’s IP address.
      3. Select a Source Interface from the drop-down. You can now select associated VRF (global or custom).
      4. Enter a Description and add (Optional) Tags.
      5. Toggle Version to enable V2 for community or V3 for users.
        One of the options must be enabled at all times. V2 is enabled by default. A maximum of 16 unique servers may be configured per version (V2 and V3).
        If V2 is enabled, Community may be configured. If community is not configured, then public is set as the default community. If V3 is enabled, user attributes can be defined, including the Name, Engine ID, and the Security Level.
      6. Select Author Private as the security level and enter the authentication type and phrase.
    5. Click Save.

    © 2026 Palo Alto Networks, Inc. All rights reserved.