DumbMonit

IntégrationsRéseau et pare-feu

Surveiller SonicWall SonicOS avec DumbMonit

Bêta

A SonicWall firewall through the SonicOS 7 API: the link of every interface bound to a zone. Kept minimal on purpose: only the API paths SonicWall publishes are read.

DocumentationSite officiel : SonicWall

Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.

Ce que DumbMonit surveille

A SonicWall firewall (TZ, NSa, NSsp, NSv) through the SonicOS 7 API: the link of every interface bound to a zone. Kept minimal on purpose. This integration was built from what SonicWall publishes about the SonicOS API, not against a running appliance. The exact fields of the interface status answer are not documented, so DumbMonit reads it tolerantly: any object carrying a name and a status string (status or link_status) is an interface. Tunnel, HA and licence states are not read, because no API path for them could be confirmed. Tell us what breaks.

Usage typique. Beta. Firewall: interface links only

Exemples

  • SonicWall TZ / NSa / NSsp
  • SonicWall NSv
  • SonicOS 7.x

Comment il se connecte

Ce qu'il faut

  • User name and passwordThe dumbmonit user, in a read-only group, sent as HTTP Basic.

Ports réseau à ouvrir

  • 443/TCPManagement interface (HTTPS, default)
Étapes de mise en place: Create a read-only user for the SonicOS API
  1. Device → Settings → Administration → Audit/SonicOS API: make sure HTTP Basic Access (RFC-2617) is on, then click Accept.

  2. Device → Users → Local Users & Groups → Add User: name it as follows, give it a long random password and add it to the group SonicWall Read-Only Admins.

    dumbmonit
  3. Allow HTTPS management on the interface DumbMonit reaches the firewall through (Device → Network → Interfaces → Configure → Management).

  4. In DumbMonit, enter the firewall address (sonicwall.lan) with that user name and password.

À savoir. The management interface ships a self-signed certificate: tick "Accept an unverifiable certificate" unless you installed your own.