DumbMonit
IntégrationsRéseau et pare-feu
Surveiller Sophos Firewall avec DumbMonit
A Sophos Firewall (SFOS) through its XML API: the link of every interface in a zone, and which IPsec connections are activated. Its live tunnel, HA and licence state are not in that API.
DocumentationSite officiel : Sophos Firewall
Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.
Ce que DumbMonit surveille
A Sophos Firewall (SFOS) through its XML API: the link of every interface bound to a zone, and which IPsec connections are activated. That is deliberately all. The XML API is a configuration API: besides the read-only connectivity status of each interface, it exposes no live state. <Get><IPSecConnection> returns whether an administrator activated a connection, not whether the tunnel is up; high availability, licences and subscriptions and the firmware version are not in it at all. DumbMonit publishes the activation as such and never presents it as a tunnel state.
Usage typique. Firewall: interface links only (the XML API exposes no tunnel, HA or licence state)
Exemples
- Sophos XGS
- Sophos Firewall virtual appliance
- SFOS 19 to 21
Comment il se connecte
Ce qu'il faut
- User name and passwordThe dumbmonit user, whose device access profile is read-only everywhere.
Ports réseau à ouvrir
4444/TCPAdministration API (HTTPS, default)
Étapes de mise en place: Allow DumbMonit to read the Sophos Firewall XML API
Profiles → Device access: add a profile named DumbMonit read-only and set every permission to Read-only.
Authentication → Users: add a user named dumbmonit, of type Administrator, with that profile and a long random password.
dumbmonitBackup & firmware → API (Administration → API access from SFOS 22): turn on the API configuration and add the DumbMonit server's address to the allowed IP addresses.
In DumbMonit, enter the firewall address (sophos.lan) with that user name and password.
À savoir. The API listens on the administration port (4444 by default) with a self-signed certificate: tick "Accept an unverifiable certificate" unless you installed your own.