SNMP management for firewall

[gojericho0]

Hi guys,

Fairly new to checkpoint and this is my first post on this forum community. I would like to monitor some firewalls using SNMPv3 with the goal of monitoring performance (cpu/memory/throughput). I see that this can be done either through the IPSO clish or the checkpoint firewall object via the CMA. Does it matter which one I use?

[northlandboy]

Originally Posted by gojericho0

Hi guys,

Fairly new to checkpoint and this is my first post on this forum community. I would like to monitor some firewalls using SNMPv3 with the goal of monitoring performance (cpu/memory/throughput). I see that this can be done either through the IPSO clish or the checkpoint firewall object via the CMA. Does it matter which one I use?

The IPSO SNMP lets you monitor OS things - e.g. disk/memory/interface state.

Enabling the Check Point SNMP component also lets you monitor some Check Point variables - e.g. concurrent connections, rejected packets.

[gojericho0]

Ok thanks for the clarification! I am running into an issue with some of the reporting. I am using SolarWinds and it is saying my memory utilization is 100%. However if I run the command "show useful-stats" it only shows 70% utilization.

is the show useful-stats accurate and do you think my NMS manager is interpreting the MIB wrong?

[karia]

Solarwinds is having a problem with all the linux boxes.


Whenever the linux box are idle Solarwinds thinks in other way and throw out alert saying 100% utilized.

Use universal device poller in case of solarwinds version and customize or use MIB browser to fine tune.

Regards,
Karia