SNMP OID for Manager/ Firewall Relationships

sinktap — Mon, 02 Sep 2024 16:42:24 GMT

Hi All,

I am working with various checkpoint models on R80.10 and R81.20. I am trying to find a way to define the relationship between an SMS server and the firewalls it manages using SNMP.

Does anyone know if there is a suitable OID to gather this information from?

Thanks.

Re: SNMP OID for Manager/ Firewall Relationships

JozkoMrkvicka — Tue, 03 Sep 2024 05:05:10 GMT

Based on "How to configure SNMP on Gaia OS", following SNMP OID is available from management:

Table with information about connected Security Gateways

.iso.org.dod.internet.private.enterprises.checkpoint.products.mngmt.mgLogServerInfo.mgConnectedGatewaysTable
.1.3.6.1.4.1.2620.1.7.14.4

Table

Table with information about Security Gateways sending logs to this Management Server / Log Server (refer to sk120341

Security Gateway Object Name / IP Address
Security Gateway state (Disconnected; Connected)
Security Gateway Last Login Time
Security Gateway Log Receive Rate

To see which gateways are managed from which management, you can use API call "show gateways-and-servers" from management.

You can also check directly on management which gateways have established CPD communication using command "netstat -anop -T | grep 18191".

All of these methods can then be used to create custom SNMP OID as per "How to configure SNMP on Gaia OS", section (IV-6) Advanced SNMP configuration - Extend SNMP with shell script.

topic SNMP OID for Manager/ Firewall Relationships in Firewall and Security Management

SNMP OID for Manager/ Firewall Relationships

Re: SNMP OID for Manager/ Firewall Relationships