Use the PAN-COMMON-MIB to monitor the following information
for Palo Alto Networks firewalls, Panorama, and WF-500 appliances:
Contains such objects as system software/hardware
versions, dynamic content versions, serial number, HA mode/state,
and global counters.
The global counters include those related
to Denial of Service (DoS), IP fragmentation, TCP state, and dropped
packets. Tracking these counters enables you to monitor traffic
irregularities that result from DoS attacks, system or connection
faults, or resource limitations. PAN-COMMON-MIB supports global
counters for firewalls but not for Panorama.
Chassis type and M-Series appliance mode
(Panorama or Log Collector).
Session utilization information. For example,
the total number of active sessions on the firewall or a specific
Status of the connection from the firewall
to the Panorama management server.
GlobalProtect gateway utilization as a percentage,
maximum tunnels allowed, and number of active tunnels.
Logging statistics for each Log Collector,
including logging rate, log quotas, disk usage, retention periods, log redundancy
(enabled or disabled), the forwarding status from firewalls to Log
Collectors, the forwarding status from Log Collectors to external
services, and the status of firewall-to-Log Collector connections.
Logging statistics for each firewall, including
logging rate, disk usage, retention periods, the forwarding status
from individual firewalls to Panorama and external servers, and
the status of firewall-to-Log Collector connections.