topic Re: Grafana and Prometheus for monitoring Check Point firewalls in Firewall and Security Management

Grafana and Prometheus for monitoring Check Point firewalls

Chandhrasekar_S — Fri, 29 Jun 2018 20:11:00 GMT

Hi Team,

Is anyone using Grafana and Prometheus tools to monitor Check Point gateways and management server? please share your experience

Re: Grafana and Prometheus for monitoring Check Point firewalls

Petter_Andersso — Fri, 27 Jul 2018 14:07:42 GMT

No and yes.

I am using Grafana togeter with influxdb, and the telegraf agent.

i have installed the telegraf agent on the gateway and managemnet server. It collects CPU, mem disk, networkdata, and some SNMP stuff and sends the metric data to a influxdb server.

Then i visulaze the data in grafana

Re: Grafana and Prometheus for monitoring Check Point firewalls

AlJo — Fri, 26 Apr 2019 02:17:57 GMT

Did you install the generic linux tarball or did you manage to find an RPM that would install?

Re: Grafana and Prometheus for monitoring Check Point firewalls

Aathi — Wed, 31 Jul 2019 07:04:40 GMT

Hi ,

Can you share the steps to configure the telegraf.

Regards

Aathi

Re: Grafana and Prometheus for monitoring Check Point firewalls

AlJo — Thu, 25 Aug 2022 14:45:34 GMT

You might want to direct that question to Petter_Andersso I am monitoring my infra with telegraf, but via the snmp plug-in... Petter appears to have installed the telegraf agent on the gateways and management servers which would have a different configuration than I am using.

Re: Grafana and Prometheus for monitoring Check Point firewalls

Henrik_Noerr1 — Thu, 25 Aug 2022 19:38:53 GMT

I think the way to go today would be using the Check Point Skyline - When it goes GA...

We also have great success using telegraf (snmp polling), influxdb and Grafana

Re: Grafana and Prometheus for monitoring Check Point firewalls

Gregory_Azratz — Mon, 29 Aug 2022 06:34:42 GMT

Hi @Chandhrasekar_S ,

We are already working on an official CheckPoint solution that will add monitoring abilities using this 2 products.
Official GA release is expected in the next few weeks.

for more information -

https://community.checkpoint.com/t5/General-Topics/Skyline-a-new-monitoring-solution-for-Check-Point-devices-on-EA/td-p/148876

or visit the official SK page - sk178566

Thanks,
Gregory

Re: Grafana and Prometheus for monitoring Check Point firewalls

Adriansinner97 — Thu, 31 Aug 2023 10:39:54 GMT

Hi guys, we are already running the Telegraf / InfluxDB v2 + Grafana and would be great to use it for the checkpoint firewalls as well.

So, is there any of you that managed to confugure it and work?
Can you please share some steps?
Do i need some telegraf agnt on the firewalls isntalled.. InfluxDB config etc etc

Thank you

Re: Grafana and Prometheus for monitoring Check Point firewalls

Henrik_Noerr1 — Thu, 31 Aug 2023 17:46:27 GMT

We have the exact same setup. This works great - with the inherited limitations of snmp.

We are heavy VSX shop, and polling Virtual Systems works great. With the limitations on VSX support by Skyline, this is the path chosen for now (and general lack of hours in the day).

Throw me your email and I can share some telegraf conf files to get you started.

Building dashboards in Grafana is trivial if you are familiar with derivatives, means and so.

/Henrik

Re: Grafana and Prometheus for monitoring Check Point firewalls

Arik_Ovtracht — Mon, 04 Sep 2023 07:21:44 GMT

Hi @Henrik_Noerr1,

I just wanted to note that the VSX limitations that were in early versions of Skyline have been removed a few months ago. You might want to give it a try.

Re: Grafana and Prometheus for monitoring Check Point firewalls

Henrik_Noerr1 — Mon, 04 Sep 2023 07:56:23 GMT

Hey Arik,

That is great to know. Can you verify that it is completely removed?

I only head it was bumped up to a higher number - 10 to 25

Regards,

Henrik

Re: Grafana and Prometheus for monitoring Check Point firewalls

Arik_Ovtracht — Mon, 04 Sep 2023 08:50:59 GMT

The limitation was indeed removed. Since then, we don't see any problem to run it with any number of VSs. However, we did indicate that we could only test it on a 25-VSs server, so advised caution when using more than that.