Problem is to monitor operational paramaters of a Palo Alto Networks Firewall Version 4.1.0 in PRTG through the HTTP XML/REST Sensor. As an example the operational status of the Firewall needs to be monitored.
Is there an example ?
How to Monitor Palo Alto Firewall through XML API
Votes:
0
1 Reply
Accepted Answer
Votes:
0
Just to answer my own question, yes you can monitor a Palo Alto Firewall ( V 4.1.0) with the help of the HTTP XML/REST Value Sensor.
- You CANNOT use the HTTP authentiction in the Sensor settings
- You need to authenticate with a XML Key
Request the XML Key from the Palo Alto Firewall with this command
| http(s):hostname/api/?type=keygen&user=username&password=password |
This should return a Key which you can use for the URL below.
Now in the PRTG XML Sensor settings use this URL (just an example)
| https://hostname/api/?type=op&cmd=show&key=key&cmd=%3Cshow%3E%3Coperational-mode%3E%3C/operational-mode%3E%3C/show%3E |
for the XML Node (and optional property) you can use:
| result[.='normal'] |
Now it's easy to adopt the XML/REST API for other commands as well. You can access the XML Browser on the Palo Alto Firewall through this URL:
| https://hostname/api |
You have to be authenticated on the Firewall WebUI in order get the XML Bowser working.
Last change on Nov 9, 2015 12:31:44 PM by
Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
Add comment