Use the PAN-COMMON-MIB to monitor the following information for Palo Alto Networks firewalls, Panorama, and WF-500 appliances:
Object Group
Contains such objects as system software/hardware versions, dynamic content versions, serial number, HA mode/state, and global counters.
The global counters include those related to Denial of Service (DoS), IP fragmentation, TCP state, and dropped packets. Tracking these counters enables you to monitor traffic irregularities that result from DoS attacks, system or connection faults, or resource limitations. PAN-COMMON-MIB supports global counters for firewalls but not for Panorama.
Chassis type and M-Series appliance mode (Panorama or Log Collector).
Session utilization information. For example, the total number of active sessions on the firewall or a specific virtual system.
Status of the connection from the firewall to the Panorama management server.
GlobalProtect gateway utilization as a percentage, maximum tunnels allowed, and number of active tunnels.
Logging statistics for each Log Collector, including logging rate, log quotas, disk usage, retention periods, log redundancy (enabled or disabled), the forwarding status from firewalls to Log Collectors, the forwarding status from Log Collectors to external services, and the status of firewall-to-Log Collector connections.
Logging statistics for each firewall, including logging rate, disk usage, retention periods, the forwarding status from individual firewalls to Panorama and external servers, and the status of firewall-to-Log Collector connections.

Related Documentation