diff --git a/Network_Devices/Other/Stormshield-SNMP-with-HA.yaml b/Network_Devices/Other/Stormshield-SNMP-with-HA.yaml new file mode 100644 index 000000000..dfaa5a669 --- /dev/null +++ b/Network_Devices/Other/Stormshield-SNMP-with-HA.yaml @@ -0,0 +1,654 @@ +zabbix_export: + version: '6.4' + template_groups: + - uuid: 36bff6c29af64692839d077febfc7079 + name: 'Templates/Network devices' + templates: + - uuid: 551e33da91654a119ad8e9b39e4affab + template: Stormshield + name: Stormshield + groups: + - name: 'Templates/Network devices' + items: + - uuid: f6e73ae950d644fdb3058cb3d64000df + name: 'System local time' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.10.1.0 + key: snsDate.Text + trends: '0' + value_type: TEXT + - uuid: e1b098ce11614f3eaa2ebcca9b0ae253 + name: 'System local UNIX time' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.10.1.0 + key: snsDate.Unix + units: unixtime + preprocessing: + - type: JAVASCRIPT + parameters: + - | + parsed = Math.floor(new Date(value).getTime() / 1000); + offset = ((new Date()).getTimezoneOffset()) * 60; + return (parsed + offset) + triggers: + - uuid: 520f3ba132374bdba7feae508eaf49d2 + expression: 'fuzzytime(/Stormshield/snsDate.Unix,{$SYSTEM.FUZZYTIME.MAX})=0' + name: 'System time is out of sync (diff with Zabbix server > {$SYSTEM.FUZZYTIME.MAX}s)' + priority: AVERAGE + - uuid: 383d43d8849b4b0cb363156547fa1992 + name: Model + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.18.1.0 + key: snsModel + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: bf2715e57fc94f5a82e391b80088c8c0 + name: 'Serial number' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.18.3.0 + key: snsSerialNumber + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: 3e5805c3df4044d1b9cfd045b501acdc + name: 'System language' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.18.5.0 + key: snsSystemLanguage + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: 1fbe8afa992d40d5ab03732bc1a7d431 + name: 'System name' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.18.4.0 + key: snsSystemName + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: f6e8511f26e94909b775a4dde1a741f3 + name: 'System uptime' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.10.2.0 + key: snsUptime + units: uptime + preprocessing: + - type: JAVASCRIPT + parameters: + - | + table = value.split(':'); + seconds = (table[0] * 24 * 60 * 60) + (table[1] * 60 * 60) + (table[2] * 60) + (table[3] * 1); + return seconds + triggers: + - uuid: 93b44d221f614ba49697d7791a43871f + expression: 'last(/Stormshield/snsUptime,#1)<10m' + name: 'Stormshield has been restarted' + priority: WARNING + - uuid: e0d1684fc40148bd9a4a4039482fc111 + name: 'Firmware version' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.18.2.0 + key: snsVersion + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + discovery_rules: + - uuid: 411be0a914fc4e0db47e6e79414a4be6 + name: 'Stormshield Health Monitor' + type: SNMP_AGENT + snmp_oid: 'discovery[{#SNSFIREWALLINDEX},1.3.6.1.4.1.11256.1.16.2.1.1,{#SNSSERIALHEALTH},1.3.6.1.4.1.11256.1.16.2.1.2,{#SNSCPUHEALTH},1.3.6.1.4.1.11256.1.16.2.1.7,{#SNSMEMHEALTH},1.3.6.1.4.1.11256.1.16.2.1.8,{#SNSDISKHEALTH},1.3.6.1.4.1.11256.1.16.2.1.9,{#SNSCERTHEALTH},1.3.6.1.4.1.11256.1.16.2.1.11,{#SNSPASSWDHEALTH},1.3.6.1.4.1.11256.1.16.2.1.14,{#SNSCPUTEMPHEALTH},1.3.6.1.4.1.11256.1.16.2.1.15]' + key: sns.health.discovery + item_prototypes: + - uuid: d88b299fbab94abca05843c7b45a06ad + name: 'Stormshield {#SNSFIREWALLINDEX} Cert Health' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.16.2.1.11.{#SNMPINDEX}' + key: 'sns.health[snsCertHealth.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: 13fa8f91c0fc44dab7995dd7782296cf + expression: 'last(/Stormshield/sns.health[snsCertHealth.{#SNMPINDEX}],#1)<>"Good"' + name: 'Stormshield certifacate is not healthy' + priority: AVERAGE + - uuid: 73b8e0570c2e4e93a2511897e5617668 + name: 'Stormshield {#SNSFIREWALLINDEX} CPUHealth' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.16.2.1.7.{#SNMPINDEX}' + key: 'sns.health[snsCpuHealth.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: a702bbc8682b402aad930bfad50601b1 + expression: 'last(/Stormshield/sns.health[snsCpuHealth.{#SNMPINDEX}],#1)<>"Good"' + name: 'Stormshield CPU is not healthy' + priority: AVERAGE + - uuid: c0c881da0b7c46869fad033beaf1e5f5 + name: 'Stormshield {#SNSFIREWALLINDEX} CPU Temperature Health' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.16.2.1.15.{#SNMPINDEX}' + key: 'sns.health[snsCpuTempHealth.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: f325dacaa9b24e73bd8d37d5be0a6fe6 + expression: 'last(/Stormshield/sns.health[snsCpuTempHealth.{#SNMPINDEX}],#1)<>"Good"' + name: 'Stormshield CPU temperature is too high' + priority: AVERAGE + - uuid: c9ef0f236bd54b39a10ca4eec27172e6 + name: 'Stormshield {#SNSFIREWALLINDEX} Disk Health' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.16.2.1.9.{#SNMPINDEX}' + key: 'sns.health[snsDiskHealth.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: 9021853e16db4385a6d2292fe4af4695 + expression: 'last(/Stormshield/sns.health[snsDiskHealth.{#SNMPINDEX}],#1)<>"Good"' + name: 'Stormshield Disk is not healthy' + priority: AVERAGE + - uuid: eec4e700383e4649ae47f84272ed7fad + name: 'Stormshield {#SNSFIREWALLINDEX} Memory Health' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.16.2.1.8.{#SNMPINDEX}' + key: 'sns.health[snsMemHealth.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: 6b28a8fdefa6467bb8efb0b8c1e6790b + expression: 'last(/Stormshield/sns.health[snsMemHealth.{#SNMPINDEX}],#1)<>"Good"' + name: 'Stormshield Memory is not healthy' + priority: AVERAGE + - uuid: c1bc0e1944dc4461873943ca8b2f2ce4 + name: 'Stormshield {#SNSFIREWALLINDEX} Password Health' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.16.2.1.14.{#SNMPINDEX}' + key: 'sns.health[snsPasswdHealth.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: b463679ed2f2400db506a4eada86a173 + expression: 'last(/Stormshield/sns.health[snsPasswdHealth.{#SNMPINDEX}],#1)<>"Good"' + name: 'Stormshield admin password should be changed' + priority: WARNING + - uuid: 5e962dbbdb2348deac41407802a36c69 + name: 'Logical interfaces' + type: SNMP_AGENT + snmp_oid: 'discovery[{#SNSIFUSERNAME},1.3.6.1.4.1.11256.1.4.1.1.2,{#SNSIFNAME},1.3.6.1.4.1.11256.1.4.1.1.3,{#SNSIFADDR},1.3.6.1.4.1.11256.1.4.1.1.4,{#SNSIFTYPE},1.3.6.1.4.1.11256.1.4.1.1.6,{#SNSIFDRVNAME},1.3.6.1.4.1.11256.1.4.1.1.38]' + key: sns.logical.interfaces + item_prototypes: + - uuid: d6c605057a31414ba2379d83b184b97a + name: 'Interface ({#SNSIFDRVNAME}): Address IP' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.4.1.1.4.{#SNMPINDEX}' + key: 'sns.logical.interfaces[SNSIFADDR.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + - uuid: 7f116882d79644c7b856635ff018da36 + name: 'Interface ({#SNSIFDRVNAME}): TCP Connections' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.4.1.1.23.{#SNMPINDEX}' + key: 'sns.logical.interfaces[SNSIFTCPCONNCOUNT.{#SNMPINDEX}]' + - uuid: 2a8614686ad142d4935b88278bf350e0 + name: 'Interface ({#SNSIFDRVNAME}): Type' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.4.1.1.6.{#SNMPINDEX}' + key: 'sns.logical.interfaces[SNSIFTYPE.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + - uuid: 05cd6f314a504b9ab08c3930118cee04 + name: 'Interface ({#SNSIFDRVNAME}): UDP Connections' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.4.1.1.24.{#SNMPINDEX}' + key: 'sns.logical.interfaces[SNSIFUDPCONNCOUNT.{#SNMPINDEX}]' + - uuid: 6679e3037b5e467f92a02806c578679f + name: 'Interface ({#SNSIFDRVNAME}): Name' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.4.1.1.2.{#SNMPINDEX}' + key: 'sns.logical.interfaces[SNSIFUSERNAME.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + graph_prototypes: + - uuid: 50bc585312bb449e8a9a2f4aec05f783 + name: 'Interface ({#SNSIFDRVNAME}): Connections' + graph_items: + - color: 00FFFF + calc_fnc: ALL + item: + host: Stormshield + key: 'sns.logical.interfaces[SNSIFTCPCONNCOUNT.{#SNMPINDEX}]' + - sortorder: '1' + color: FF0080 + calc_fnc: ALL + item: + host: Stormshield + key: 'sns.logical.interfaces[SNSIFUDPCONNCOUNT.{#SNMPINDEX}]' + - uuid: 113f2501abf14ebb9bcb265eaca2a6ec + name: 'Physical interfaces' + type: SNMP_AGENT + snmp_oid: 'discovery[{#IFDESCR},1.3.6.1.2.1.2.2.1.2,{#IFPHYSADDRESS},1.3.6.1.2.1.2.2.1.6,{#IFADMINSTATUS},1.3.6.1.2.1.2.2.1.7,{#IFOPERSTATUS},1.3.6.1.2.1.2.2.1.8,{#IFINOCTETS},1.3.6.1.2.1.2.2.1.10,{#IFOUTOCTETS},1.3.6.1.2.1.2.2.1.16,{#IFINDISCARDS},1.3.6.1.2.1.2.2.1.13,{#IFOUTDISCARDS},1.3.6.1.2.1.2.2.1.19,{#IFINERRORS},1.3.6.1.2.1.2.2.1.14,{#IFOUTERRORS},1.3.6.1.2.1.2.2.1.20]' + key: sns.physical.interfaces + item_prototypes: + - uuid: 7f16265f34df4fe9abd1ddf2aab7238c + name: 'Interface ({#IFDESCR}): Administration status' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.7.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFADMINSTATUS.{#SNMPINDEX}]' + delay: 3m + - uuid: 6483bdeeaf8f4dfd8889c932d9c11b28 + name: 'Interface ({#IFDESCR}): Inbound packets discarded' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFINDISCARDS.{#SNMPINDEX}]' + delay: 3m + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + - uuid: f3b42cba33b0424aafd00ef03842ad8b + name: 'Interface ({#IFDESCR}): Inbound packets with errors' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFINERRORS.{#SNMPINDEX}]' + delay: 3m + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + - uuid: 007dd4a6552c4653817cee934d041486 + name: 'Interface ({#IFDESCR}): Bits received' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.10.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFINOCTETS.{#SNMPINDEX}]' + delay: 3m + units: bps + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: MULTIPLIER + parameters: + - '8' + - uuid: 263b587844f443099705b6cc7ec23ee5 + name: 'Interface ({#IFDESCR}): Operational status' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFOPERSTATUS.{#SNMPINDEX}]' + delay: 3m + - uuid: 8fff13f3c2bc462c8d205c7a8c92027e + name: 'Interface ({#IFDESCR}): Outbound packets discarded' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFOUTDISCARDS.{#SNMPINDEX}]' + delay: 3m + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + - uuid: d3fbccd5a8a54522b7ae2ba38ec9dc19 + name: 'Interface ({#IFDESCR}): Outbound packets with errors' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFOUTERRORS.{#SNMPINDEX}]' + delay: 3m + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + - uuid: ca940fa934ce4bb89ac305aab02202f0 + name: 'Interface ({#IFDESCR}): Bits sent' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.16.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFOUTOCTETS.{#SNMPINDEX}]' + delay: 3m + units: bps + preprocessing: + - type: CHANGE_PER_SECOND + parameters: + - '' + - type: MULTIPLIER + parameters: + - '8' + - uuid: c6d8fdced5f947608a3c3a63bbeb168c + name: 'Interface ({#IFDESCR}): Adres MAC' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.2.1.2.2.1.6.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFPHYSADDRESS.{#SNMPINDEX}]' + delay: 3m + trends: '0' + value_type: TEXT + - uuid: 0e57c2ffbbb543b89cd0237f1e6a58ab + name: 'Interface ({#IFDESCR}): Speed' + type: SNMP_AGENT + snmp_oid: '.1.3.6.1.2.1.2.2.1.5.{#SNMPINDEX}' + key: 'sns.physical.interfaces[IFSPEED.{#SNMPINDEX}]' + delay: 1h + units: bps + graph_prototypes: + - uuid: af12d0c57f374d3c817aa975e58aaa7a + name: 'Interface ({#IFDESCR}): Network traffic' + graph_items: + - drawtype: GRADIENT_LINE + color: 80FF00 + item: + host: Stormshield + key: 'sns.physical.interfaces[IFINOCTETS.{#SNMPINDEX}]' + - sortorder: '1' + drawtype: BOLD_LINE + color: FFBF00 + item: + host: Stormshield + key: 'sns.physical.interfaces[IFOUTOCTETS.{#SNMPINDEX}]' + - sortorder: '2' + color: 0277BD + yaxisside: RIGHT + item: + host: Stormshield + key: 'sns.physical.interfaces[IFINDISCARDS.{#SNMPINDEX}]' + - sortorder: '3' + color: 303F9F + yaxisside: RIGHT + item: + host: Stormshield + key: 'sns.physical.interfaces[IFINERRORS.{#SNMPINDEX}]' + - sortorder: '4' + color: 9C27B0 + yaxisside: RIGHT + item: + host: Stormshield + key: 'sns.physical.interfaces[IFOUTDISCARDS.{#SNMPINDEX}]' + - sortorder: '5' + color: D81B60 + yaxisside: RIGHT + item: + host: Stormshield + key: 'sns.physical.interfaces[IFOUTERRORS.{#SNMPINDEX}]' + - uuid: ae14fad8b3a74d20814b1a04edbdd24a + name: 'VPN IKE tunnels' + type: SNMP_AGENT + snmp_oid: 'discovery[{#SNSVPNIKESARULENAME},1.3.6.1.4.1.11256.1.1.2.1.2,{#SNSVPNIKESASTATE},1.3.6.1.4.1.11256.1.1.2.1.6]' + key: sns.VPN.IKE + item_prototypes: + - uuid: fc5559aa3776428ab07c13f6b17ba2ab + name: 'IkeVPN Tunel {#SNMPINDEX} - Name' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.1.2.1.2.{#SNMPINDEX}' + key: 'sns.VPN.IKE[snsName.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + - uuid: e68ad7a5ec5743df93398ca3804d6f29 + name: 'IkeVPN Tunel {#SNMPINDEX} - State' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.1.2.1.6.{#SNMPINDEX}' + key: 'sns.VPN.IKE[snsState.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: 78bf0629267448e981afddf1891a75e6 + expression: 'last(/Stormshield/sns.VPN.IKE[snsState.{#SNMPINDEX}],#1)<>"established"' + name: 'IPSEC VPN Tunnel "{#SNSVPNIKESARULENAME}" is disconnected' + priority: AVERAGE + - uuid: 6912fab3fdbd4facbc424133f509753c + name: 'Firewall routes' + type: SNMP_AGENT + snmp_oid: 'discovery[{#SNSROUTETYPE},1.3.6.1.4.1.11256.1.14.1.1.2,{#SNSROUTEROUTERNAME},1.3.6.1.4.1.11256.1.14.1.1.4,{#SNSROUTEGATEWAYNAME},1.3.6.1.4.1.11256.1.14.1.1.5,{#SNSROUTESTATE},1.3.6.1.4.1.11256.1.14.1.1.9,{#SNSROUTEACTIVE},1.3.6.1.4.1.11256.1.14.1.1.11,{#SNSROUTESYSDEFAULTGATEWAY},1.3.6.1.4.1.11256.1.14.1.1.13]' + key: snsRoute + filter: + evaltype: FORMULA + formula: '(A and B) or (C and D) or (E and F) or (G and H) or (I and J) or (K and L) or (M and N) or (O and P) or (Q and R) or (S and T)' + conditions: + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.0.TYPE}' + formulaid: A + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.0.NAME}' + formulaid: B + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.1.TYPE}' + formulaid: C + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.1.NAME}' + formulaid: D + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.2.TYPE}' + formulaid: E + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.2.NAME}' + formulaid: F + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.3.TYPE}' + formulaid: G + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.3.NAME}' + formulaid: H + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.4.TYPE}' + formulaid: I + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.4.NAME}' + formulaid: J + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.5.TYPE}' + formulaid: K + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.5.NAME}' + formulaid: L + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.6.TYPE}' + formulaid: M + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.6.NAME}' + formulaid: 'N' + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.7.TYPE}' + formulaid: O + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.7.NAME}' + formulaid: P + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.8.TYPE}' + formulaid: Q + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.8.NAME}' + formulaid: R + - macro: '{#SNSROUTETYPE}' + value: '{#MONITORED.ROUTE.9.TYPE}' + formulaid: S + - macro: '{#SNSROUTEGATEWAYNAME}' + value: '{#MONITORED.ROUTE.9.NAME}' + formulaid: T + description: | + STORMSHIELD-ROUTE-MIB raports both routes for PBR rand router objects. To avoid duplicating triggers for unavailable routes I created filters in this discovery rule. To correctly collect data about routes you should create macros on the stormshield host containing TYPE and NAME of route. For an example: + {#MONITORED.ROUTE.0.TYPE} PBR + {#MONITORED.ROUTE.0.NAME} Firewall_WAN1_route + {#MONITORED.ROUTE.1.TYPE} DefaultRoute + {#MONITORED.ROUTE.1.NAME} Firewall_WAN2_route + There is preconfigured 9 possible route macros. If you want to monitor or possible routes you can also delete filters. + item_prototypes: + - uuid: fc4da3532c304ba3b8bc0a364078dae0 + name: 'Route [{#SNSROUTEGATEWAYNAME}] isActive' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.14.1.1.11.{#SNMPINDEX}' + key: 'snsRoute.SNSROUTEACTIVE.[{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + - uuid: 7d6b76fb46b5487b819e102304bc873f + name: 'Route [{#SNSROUTEGATEWAYNAME}] Router Name' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.14.1.1.4.{#SNMPINDEX}' + key: 'snsRoute.SNSROUTEROUTERNAME.[{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + - uuid: b3ba2aaafb584017a1235f27c57d6346 + name: 'Route [{#SNSROUTEGATEWAYNAME}] State' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.14.1.1.9.{#SNMPINDEX}' + key: 'snsRoute.SNSROUTESTATE.[{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + trigger_prototypes: + - uuid: 041c9cc1486447748fb0db9bc7d9b3cd + expression: 'last(/Stormshield/snsRoute.SNSROUTESTATE.[{#SNMPINDEX}],#1)<>"UP"' + name: 'Route [{#SNSROUTEGATEWAYNAME}] is unreachable' + priority: AVERAGE + - uuid: 7100925618934ab2883da29b7a0bd82d + name: 'Route [{#SNSROUTEGATEWAYNAME}] isDefault' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.14.1.1.13.{#SNMPINDEX}' + key: 'snsRoute.SNSROUTESYSDEFAULTGATEWAY.[{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + - uuid: 523c7317d17847d89a042146958ce386 + name: 'Route [{#SNSROUTEGATEWAYNAME}] Type' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.14.1.1.2.{#SNMPINDEX}' + key: 'snsRoute.Type.[{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + macros: + - macro: '{$MONITORED.ROUTE.0.NAME}' + - macro: '{$MONITORED.ROUTE.0.TYPE}' + - macro: '{$SYSTEM.FUZZYTIME.MAX}' + value: '60' + - uuid: 6183d51cd28747d2a0cfb224bfe12139 + template: 'Stormshield - Klaster HA' + name: 'Stormshield - Klaster HA' + templates: + - name: Stormshield + groups: + - name: 'Templates/Network devices' + items: + - uuid: 6dcab040345743dfa0307da739436224 + name: 'Number of unresponsive firewall nodes' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.11.2.0 + key: snsNbDeadNode + triggers: + - uuid: 7acdb38c503d46d79ef4fca86ae74e02 + expression: 'last(/Stormshield - Klaster HA/snsNbDeadNode,#1)<>0' + name: 'Stormshield cluster - at least one NODE is unresponsive' + priority: AVERAGE + - uuid: 8436cd7cdd3a45448577baaf9e675832 + name: 'Number of faulty HA links' + type: SNMP_AGENT + snmp_oid: .1.3.6.1.4.1.11256.1.11.6.0 + key: snsNbFaultyHALinks + triggers: + - uuid: e21cbc078ad745c6bb826add58b2ec4c + expression: 'last(/Stormshield - Klaster HA/snsNbFaultyHALinks,#1)<>0' + name: 'Stormshield cluster - at least one HA link is faulty' + priority: AVERAGE + discovery_rules: + - uuid: cc376edba7dc428f8f0369dc7abd40da + name: 'Firewall nodes data' + type: SNMP_AGENT + snmp_oid: 'discovery[{#SNSNODEINDEX},1.3.6.1.4.1.11256.1.11.7.1.1,{#SNSFWSERIAL},1.3.6.1.4.1.11256.1.11.7.1.2,{#SNSONLINE},1.3.6.1.4.1.11256.1.11.7.1.3,{#SNSMODEL},1.3.6.1.4.1.11256.1.11.7.1.4,{#SNSVERSION},1.3.6.1.4.1.11256.1.11.7.1.5,{#SNSHALICENCE},1.3.6.1.4.1.11256.1.11.7.1.6,{#SNSHAACTIVE},1.3.6.1.4.1.11256.1.11.7.1.10,{#SNSHAUPTIME},1.3.6.1.4.1.11256.1.11.7.1.11]' + key: snsHA + item_prototypes: + - uuid: c6865f2f164b40d19b5e059310b2fe13 + name: 'Firewall NODE {#SNSNODEINDEX}: Serial number' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.2.{#SNMPINDEX}' + key: 'snsHA[snsFwSerial.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: e2cf55c8b88347479a62452920ff3fce + name: 'Firewall NODE {#SNSNODEINDEX}: isActive' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.10.{#SNMPINDEX}' + key: 'snsHA[snsHAActive.{#SNMPINDEX}]' + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + trigger_prototypes: + - uuid: af3a34946eac4e9982e6b6b2ee6297bd + expression: 'last(/Stormshield - Klaster HA/snsHA[snsHAActive.{#SNMPINDEX}],#1)<>last(/Stormshield - Klaster HA/snsHA[snsHAActive.{#SNMPINDEX}],#2)=1' + name: 'Firewall node {#SNSNODEINDEX} state changed' + priority: INFO + description: 'Acknowledge to close' + manual_close: 'YES' + - uuid: cd33c768b28149de8b08bcf37f55c5c5 + name: 'Firewall NODE {#SNSNODEINDEX}: License type' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.6.{#SNMPINDEX}' + key: 'snsHA[snsHALicence.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: 3610c10584254b40a889437b8e46876e + name: 'Firewall NODE {#SNSNODEINDEX}: Uptime' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.11.{#SNMPINDEX}' + key: 'snsHA[snsHAUptime.{#SNMPINDEX}]' + units: s + - uuid: 419874ace5cd4e9990a9e894eb500e68 + name: 'Firewall NODE {#SNSNODEINDEX}: Model' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.4.{#SNMPINDEX}' + key: 'snsHA[snsModel.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: ffba432e74514912a6cb832d704db2ec + name: 'Firewall NODE {#SNSNODEINDEX}: Status' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.3.{#SNMPINDEX}' + key: 'snsHA[snsOnline.{#SNMPINDEX}]' + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200' + - uuid: fa7760ded8d44081ac9deb38c315d8c9 + name: 'Firewall NODE {#SNSNODEINDEX}: Firmware Version' + type: SNMP_AGENT + snmp_oid: '1.3.6.1.4.1.11256.1.11.7.1.5.{#SNMPINDEX}' + key: 'snsHA[snsVersion.{#SNMPINDEX}]' + delay: 1h + trends: '0' + value_type: TEXT + preprocessing: + - type: DISCARD_UNCHANGED_HEARTBEAT + parameters: + - '43200'