ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Not discovering all memory components in Palo Alto Firewalls

book

Article ID: 145784

calendar_today

Updated On:

Products

CA Infrastructure Management CA Performance Management - Usage and Administration DX NetOps

Issue/Introduction

Performance Mangement only discovered one memory component when discovering our palo alto firewalls. The Vendor Cert that was used was the vendor provided 'Host Resources Storage' v1.1. In doing an snmpwalk of the hrStorage mib tables, there are 8 entries in that mib table, but performance management discovery only found the first one. This seems to be consistent across all of the palo alto firewalls we have, which includes 7000, 3060, 5000. 

Cause

NA

Environment

Release : 3.6

Component : IM Reporting / Admin / Configuration

Resolution

This is what we see in MIB tools



We only saw "Slot-0 Management Memory".

The backing vendor cert for xxx.xxx.xx.xx is "Host Resources Storage". 

Here is the URL:


http://da:8581/typecatalog/certifications/snmp/hrStorageMib

Here is the expression to capture memory:

<ExpressionGroup destCert="{http://im.ca.com/normalizer}NormalizedMemoryInfo" name="hrNRMPhysicalMemoryDS">
<Filter>
snmpOIDParser(hrStorageType,hrStorageType.toString().split("\\.").length,-1).toString()==2
</Filter>

The filter means the last octet of the value of storage type needs to be a 2 in order for us to discover it.  This is the OID for hrStorageType:

<Attribute name="hrStorageType" type="ObjectID">
<Documentation/>
<IsKey>true</IsKey>
<Source>1.3.6.1.2.1.25.2.3.1.2</Source>
</Attribute>

Checking mibtools this is what we see:



Please note the first one on the list (instance 20) is the only one that has a value where the last octet is a 2.  This matches up with "Slot-0 Management Memory" from the first screenshot

.4 is for PartitionsInfo MF
.3 is for Virtual Memory MF

So in summary, "Slot-0 Management Memory" is the ONLY memory component you should be discovering.