Checkpoint VSX gateways in NetBrain - SNMPv3 ??

[BeaconBits]

Hello,

I'm trying to discover my checkpoint VSX gateways with 4 VS enabled be discovered in the NetBrain through the SNMPv3.

In single gateway (not VSX), allwing the incoming packet from the monitoring server's IP address needs to be added. But in the VSX mode where I have 4 VS what should I do?

I tried to log on into the VSX gateway and I got the below mesaage:

I think I need to allow the Monitoring Server IP address to the VS itself with SNMP service running. WHat do you think?

Server IP address --> VSX-VS0 snmp  allow

Any suggestion that how I can achieve this???

Kind regads,

B

vsx‌ vsx cluster‌ virtual systems‌ snmp‌ monitor‌

[Claudio_Bolcato]

Did you check here?
There is a valid guide for VSX

How to configure SNMP on Gaia OS 

[JozkoMrkvicka]

Check also this one:

https://community.checkpoint.com/message/1816 

[Kaspars_Zibarts]

Just remember that you will need actual FW rule on VS0 to allow this access

[BeaconBits]

Back at work and still not getting anywhere.

The documentation not being helpful so far.. yes it does explain well.

So the scenario is:

The VSX box has an IP: 192.168.0.1 and four VSs are 10.10.10.1 to 10.10.10.4.

So 192.168.0.1 is running as vs0 and the rests are:

10.10.10.1 = vs1

10.10.10.2 = vs2

10.10.10.3 = vs2

10.10.10.4 = vs2

Checkpoint says this:

Check Point VSX R77 Versions Administration Guide 

Therefore, according to this I have policy rule on VS0 that is VSX gateway:

from (any) To VS0 (192.168.0.1) Service (snmp) ACCEPT

and on vs1 policy:

from (Netbrain_IP) To vs1(10.10.10.1) Service (snmp) ACCEPT

and all other VSs exactly the same as the vs1 rule.

At this point, It's not working BUT... it is working exactly the same way for Solarwinds.

Your thoughts guys??

Regards,

B

[JozkoMrkvicka]

Solarwinds is working but Netbrain not ?

Are both monitoring tools withing the same subnet (preffered to have exactly the same IP to exclude routing and other issues) ?

Did you check documentation for Netbrain if they support VSX monitoring ?

[BeaconBits]

This is what I've found so far.

Checkpoint Virtual Instance Discovery - The Net-Brainer 

but not any detail yet.