Snmp settings on the firewall object

[Kubann]

Hi There
I'm trying to configure the checkpoint SNMP server for our numerous checkpoint NGX R60 clusters. One of these clusters is a SecurePlatform / ClusterXL cluster, the others are Nokia/IPSO/VRRP clusters. All are failover configurations.

Usually the SNMP settings are visible on a firewall object, however once a firewall object is added to a cluster these SNMP settings disappear.

How do I go about getting the checkpoint SNMP servers running and configured on these clusters ?

Please help

Thanks
K

[Kubann]

Has anyone have any feedback for me on this?

Thanks

[dbedit]

I think you have to detach gateways from cluster and individually configure snmp first and afterwards adding them to the cluster. SNMP is configured per gateway. For your VRRP clusters you can use SNMP on IPSO for traps. I don't know if the Checkpoint MIB also includes strings for Cluster-XL.Run a MIB-browser on it to check.

[Kubann]

Thanks mate

[Eaulivier]

Originally Posted by Kubann

Has anyone have any feedback for me on this?

Thanks

Feedback from Checkpoint was a surprise when I showed them that missing feature ...

I confirm, you have to configure first snmp on your nodes before adding them to the cluster. Also snmp on both CP & Nokia gives you more infos but only one snmpd is used (I think the Nokia's one) ...

Another remark, you need R60 HFA03 to have that feature working on flash based devices.

[Fulvio]

Similar question:
I am evaluating Nokia Appliance Manger which should be able to monitor/report on appliances and appliacations.

I have configured SNMP using voyager and can see the appliances (nokia ip380 IPSO 4) on Appliance Manager.

I have enabled SNMP on the firewalls cpconfig command, option 2, but I can't see the checkpoint application (CP NGX R60 HF04).

If I drill down one of the appliances at Checpoint details it says:
No Check Point Firewall found on appliance, or CP SNMPd extension is disabled.

To collect the SNMP info of the appliances I had to configure SNMP protocol to be part of myreadcommunity read community, but how do I do this with SNMP on the firewalls? Also the SNMP port for the appliances is 161 do I use a different port for firewalls?

How can I check that SNMPd is working properly on the firewalls?
I can see (using SmartViewTracker) collection of snmp information on the appliances but can't see any drop/accept regarding the firewalls.

Any help is much appriciated.

Fulvio

Anything else I should know about?