DumbMonit
Monitorizar Sophos Firewall com o DumbMonit
A Sophos Firewall (SFOS) through its XML API: the link of every interface in a zone, and which IPsec connections are activated. Its live tunnel, HA and licence state are not in that API.
DocumentaçãoSite oficial: Sophos Firewall
As descrições estão em inglês, como no produto. Os rótulos da página seguem o seu idioma.
O que o DumbMonit vigia
A Sophos Firewall (SFOS) through its XML API: the link of every interface bound to a zone, and which IPsec connections are activated. That is deliberately all. The XML API is a configuration API: besides the read-only connectivity status of each interface, it exposes no live state. <Get><IPSecConnection> returns whether an administrator activated a connection, not whether the tunnel is up; high availability, licences and subscriptions and the firmware version are not in it at all. DumbMonit publishes the activation as such and never presents it as a tunnel state.
Utilização típica. Firewall: interface links only (the XML API exposes no tunnel, HA or licence state)
Exemplos
- Sophos XGS
- Sophos Firewall virtual appliance
- SFOS 19 to 21
Como se liga
O que precisa
- User name and passwordThe dumbmonit user, whose device access profile is read-only everywhere.
Portas de rede a abrir
4444/TCPAdministration API (HTTPS, default)
Passos de configuração: Allow DumbMonit to read the Sophos Firewall XML API
Profiles → Device access: add a profile named DumbMonit read-only and set every permission to Read-only.
Authentication → Users: add a user named dumbmonit, of type Administrator, with that profile and a long random password.
dumbmonitBackup & firmware → API (Administration → API access from SFOS 22): turn on the API configuration and add the DumbMonit server's address to the allowed IP addresses.
In DumbMonit, enter the firewall address (sophos.lan) with that user name and password.
Atenção. The API listens on the administration port (4444 by default) with a self-signed certificate: tick "Accept an unverifiable certificate" unless you installed your own.