topic Re: Concurrent session monitoring through Nagios in Firewall and Security Management

Concurrent session monitoring through Nagios

shamimalam — Mon, 30 Nov 2020 08:46:49 GMT

Hi Expert,

My client want me to enable concurrent session monitoring through Nagios and an alert should be triggered if it exceeds from the limit.

Can you please guide me how to enable this. any of SK is available ? I have R77.20 and R80.40.

Re: Concurrent session monitoring through Nagios

_Val_ — Mon, 30 Nov 2020 08:35:56 GMT

What do you mean, "exceeds the limit"? What limit, and how do you define it?

Re: Concurrent session monitoring through Nagios

shamimalam — Mon, 30 Nov 2020 09:04:45 GMT

Hi Admin,

We have Concurrent session 60K limit set in Firewall but its showing 60101 Peak connection in #fw ctl pstat. 101 connection is dropping by Firewall and that can be seen in Zdebug logs.

I want to monitor this Concurrent session through Nagios. Please guide.Pik concurrent connection highlighted.

Re: Concurrent session monitoring through Nagios

_Val_ — Mon, 30 Nov 2020 09:56:18 GMT

You need to pull concurrent connections with SNMP and set an alarm in your monitoring solution. Look for best practices of monitoring here: sk106126

Re: Concurrent session monitoring through Nagios

shamimalam — Wed, 02 Dec 2020 05:39:13 GMT

This is very useful. Thanks for sharing.

Can help share any SK to configure SNMP on VSX.

SNMP is configured on physical FW (in HA) and its sending logs to Monitoring platform but there are seven VSX on this FW. I need help to configure SNMP to all seven VSX.

Re: Concurrent session monitoring through Nagios

Chris_Atkinson — Wed, 02 Dec 2020 09:55:48 GMT

Please see sk90860

Examples:

Provided information	SNMP Object ID	SNMP Object Name
Number of active connections on Virtual Device	.1.3.6.1.4.1.2620.1.16.23.1.1.2	`vsxCountersConnNum`
Number of concurrent connections	.1.3.6.1.4.1.2620.1.1.25.3.0	`fwNumConn`