topic Re: Read counters from the TE appliance. in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34773#M13789 <HTML><HEAD></HEAD><BODY><P>Hi Soren,</P><P></P><P>are the values 0 or do they not match ?</P><P><BR />Regards Thomas</P></BODY></HTML> Thu, 25 Oct 2018 15:52:11 GMT Thomas_Werner 2018-10-25T15:52:11Z Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34767#M13783 <HTML><HEAD></HEAD><BODY><P>Hi</P><P>How is the best way to read the following counter from a TE appliance with an external script?</P><P>Scanned File</P><P>Malicious Files Detected</P><P>Queue Size</P><P></P><P>Greetings</P><P>Søren Kristensen</P></BODY></HTML> Fri, 12 Oct 2018 12:21:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34767#M13783 Soren_Kristense 2018-10-12T12:21:59Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34768#M13784 <HTML><HEAD></HEAD><BODY><P>Probably you can find what you need with snmp starting from point 23 </P><P><A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk114806&amp;partition=Advanced&amp;product=Threat#Monitoring" title="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk114806&amp;partition=Advanced&amp;product=Threat#Monitoring">ATRG: Threat Emulation</A>&nbsp;</P></BODY></HTML> Fri, 12 Oct 2018 14:27:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34768#M13784 Marco_Valenti 2018-10-12T14:27:32Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34769#M13785 <HTML><HEAD></HEAD><BODY><P class="">Hi&nbsp;</P><P class="">Thanks</P><P class="">Is there a mib file for this, they are not in the one I have found.</P><P class="">Greetings&nbsp;</P><P class="">Søren</P></BODY></HTML> Fri, 12 Oct 2018 15:15:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34769#M13785 Soren_Kristense 2018-10-12T15:15:16Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34770#M13786 <HTML><HEAD></HEAD><BODY><P>you should be able to add a custom snmp sensor with the reported oid this will work for sure , for mib file you can look at realtive sk </P><P></P><P><A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk90470&amp;partition=General&amp;product=All%22" title="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk90470&amp;partition=General&amp;product=All%22">Check Point SNMP MIB files</A>&nbsp;</P></BODY></HTML> Mon, 15 Oct 2018 08:57:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34770#M13786 Marco_Valenti 2018-10-15T08:57:59Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34771#M13787 <HTML><HEAD></HEAD><BODY><P>Hi&nbsp;<SPAN style="color: #333333; background-color: #ffffff;">Søren,</SPAN></P><P></P><P>I put together a document:</P><P><A href="https://community.checkpoint.com/docs/DOC-3201">Using SNMP with SandBlast Network</A>&nbsp;</P><P></P><P>Regards Thomas</P></BODY></HTML> Wed, 17 Oct 2018 12:58:26 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34771#M13787 Thomas_Werner 2018-10-17T12:58:26Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34772#M13788 <HTML><HEAD></HEAD><BODY><P>Hi Thomas</P><P>I have been testing the OID's, and they do not return the values as the CLI commands.</P><P>the CLI values are changing, the OID values do not change.</P></BODY></HTML> Thu, 25 Oct 2018 15:12:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34772#M13788 Soren_Kristense 2018-10-25T15:12:58Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34773#M13789 <HTML><HEAD></HEAD><BODY><P>Hi Soren,</P><P></P><P>are the values 0 or do they not match ?</P><P><BR />Regards Thomas</P></BODY></HTML> Thu, 25 Oct 2018 15:52:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34773#M13789 Thomas_Werner 2018-10-25T15:52:11Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34774#M13790 <HTML><HEAD></HEAD><BODY><P>Hi<BR />I get something like this</P><P></P><P>[Expert@TE-box:0]# cpstat threat-emulation -f scanned_files</P><P>TE Scanned Files:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2416</P><P>TE Scanned Files Last Day:&nbsp;&nbsp; 1824</P><P>TE Scanned Files Last Week:&nbsp; 11526</P><P>TE Scanned Files Last Month: 60923</P><P>&nbsp;</P><P>[Expert@TE-box:0]# snmpwalk -v 2c -c Public&nbsp; localhost .1.3.6.1.4.1.2620.1.49.4</P><P>SNMPv2-SMI::enterprises.2620.1.49.4.1.0 = Gauge32: 2309</P><P>SNMPv2-SMI::enterprises.2620.1.49.4.2.0 = Gauge32: 1388</P><P>SNMPv2-SMI::enterprises.2620.1.49.4.3.0 = Gauge32: 11818</P><P>SNMPv2-SMI::enterprises.2620.1.49.4.4.0 = Gauge32: 61755</P></BODY></HTML> Thu, 25 Oct 2018 16:04:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34774#M13790 Soren_Kristense 2018-10-25T16:04:58Z Re: Read counters from the TE appliance. https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34775#M13791 <HTML><HEAD></HEAD><BODY><P>Slight mismatch <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>Please open a TAC ticket if you want to get a reason for it ... I am not sure if SNMP values are counters directly from "tecli s s"</P><P></P><P>Regards Thomas</P></BODY></HTML> Thu, 25 Oct 2018 16:26:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Read-counters-from-the-TE-appliance/m-p/34775#M13791 Thomas_Werner 2018-10-25T16:26:36Z