topic Re: VPN Throughput SNMP in General Topics

VPN Throughput SNMP

Shurik — Mon, 01 Feb 2021 22:01:56 GMT

Hello guys,

Is there a way to get VPN throughput via SNMP? Would like to see statistics for all VPN tunnels in our monitoring system.

Thank you.

Re: VPN Throughput SNMP

PhoneBoy — Tue, 02 Feb 2021 20:25:12 GMT

We do have some VPN counters listed here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90860&partition=Basic&product=Security#Common%20used%20SNMP%20OIDs%20-%20Check%20Point%20Software%20Blades%20counters%20-%20Logging
However, nothing that speaks to throughput.
That really requires an end-to-end measurement to get an accurate picture.

Re: VPN Throughput SNMP

Shurik — Tue, 02 Feb 2021 20:53:41 GMT

Thanks!
End-to-end, do you mean count the bytes of the tunnel?

Re: VPN Throughput SNMP

G_W_Albrecht — Tue, 02 Feb 2021 21:10:22 GMT

The SK has Number of IPsec ESP encrypted packets per second and Number of IPsec ESP decrypted packets per second for every GW. I would think that should fit your statistical purpose, but not for tunnel, only GW. Afaik (cpview?) only SVMonitor, the legacy one, has realtime tunnel monitoring.