DumbMonit
IT
GitHub Installa

IntegrazioniRete e firewall

Monitorare Palo Alto PAN-OS con DumbMonit

Beta

A Palo Alto Networks firewall through the PAN-OS XML API: interfaces without link, HA peer lost or out of sync, session table filling up, management CPU and memory, licences expiring, failed commits.

DocumentazioneSito ufficiale: Palo Alto Networks PAN-OS

Le descrizioni sono in inglese, come nel prodotto. Le etichette della pagina seguono la tua lingua.

Cosa controlla DumbMonit

A Palo Alto Networks firewall (physical or VM-Series) through the PAN-OS XML API: interfaces bound to a zone that lost their link, an HA pair that lost its peer or is out of sync, a session table filling up, management CPU and memory, licences and subscriptions expiring, and a failed configuration commit. This integration was built from Palo Alto Networks' XML API documentation, not against a running firewall. Every call is a read, but the shape of some answers (HA state, show system resources, show interface all) is the least documented: tell us what breaks.

Uso tipico. Beta. Firewall: interface links, HA peer and sync, session table, licences, failed commits

Esempi

  • PA-400 / PA-1400 series
  • VM-Series
  • PAN-OS 10.x and 11.x

Come si collega

Cosa serve

  • User name and passwordThe dumbmonit account: DumbMonit asks the firewall for an API key with it and keeps the key, the password only travels in a request body.
  • API keyA key already generated for the dumbmonit account, sent in the X-PAN-KEY header.

Porte di rete da aprire

  • 443/TCPManagement interface (HTTPS, default)
Passaggi di configurazione: Create a read-only XML API account for DumbMonit

  1. Device → Admin Roles → Add: name the role as follows. On the XML API tab enable Operational Requests only; leave every other privilege, and the Web UI and Command Line tabs, disabled.

    dumbmonit-ro

  2. Device → Administrators → Add: name the account as follows, set Authentication to a password, the type to Role Based and the role to the one above.

    dumbmonit

  3. Click Commit: the role and the account exist only once committed.

  4. In DumbMonit, enter the firewall address (pa.lan) with that user name and password, or with an API key you generated for that account.

Attenzione. The management interface ships a self-signed certificate: tick "Accept an unverifiable certificate" unless you installed your own.

Anche in Rete e firewall