Problem is to monitor operational paramaters of a Palo Alto Networks Firewall Version 4.1.0 in PRTG through the HTTP XML/REST Sensor. As an example the operational status of the Firewall needs to be monitored.

Is there an example ?


Article Comments

Just to answer my own question, yes you can monitor a Palo Alto Firewall ( V 4.1.0) with the help of the HTTP XML/REST Value Sensor.

  • You CANNOT use the HTTP authentiction in the Sensor settings
  • You need to authenticate with a XML Key

Request the XML Key from the Palo Alto Firewall with this command

http(s):hostname/api/?type=keygen&user=username&password=password

This should return a Key which you can use for the URL below.

Now in the PRTG XML Sensor settings use this URL (just an example)

https://hostname/api/?type=op&cmd=show&key=key&cmd=%3Cshow%3E%3Coperational-mode%3E%3C/operational-mode%3E%3C/show%3E

for the XML Node (and optional property) you can use:

result[.='normal']

Now it's easy to adopt the XML/REST API for other commands as well. You can access the XML Browser on the Palo Alto Firewall through this URL:

https://hostname/api

You have to be authenticated on the Firewall WebUI in order get the XML Bowser working.


Nov, 2011 - Permalink