Not discovering all memory components in Palo Alto Firewalls

Products

• CA Infrastructure Management
• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

Performance Mangement only discovered one memory component when discovering our palo alto firewalls. The Vendor Cert that was used was the vendor provided 'Host Resources Storage' v1.1. In doing an snmpwalk of the hrStorage mib tables, there are 8 entries in that mib table, but performance management discovery only found the first one. This seems to be consistent across all of the palo alto firewalls we have, which includes 7000, 3060, 5000. 

Environment

Release : 3.6

Component : IM Reporting / Admin / Configuration

Cause

NA

Resolution

This is what we see in MIB tools



We only saw "Slot-0 Management Memory".

The backing vendor cert for xxx.xxx.xx.xx is "Host Resources Storage". 

Here is the URL:

http://da:8581/typecatalog/certifications/snmp/hrStorageMib

Here is the expression to capture memory:

<ExpressionGroup destCert="{http://im.ca.com/normalizer}NormalizedMemoryInfo" name="hrNRMPhysicalMemoryDS">
<Filter>
snmpOIDParser(hrStorageType,hrStorageType.toString().split("\\.").length,-1).toString()==2
</Filter>

The filter means the last octet of the value of storage type needs to be a 2 in order for us to discover it.  This is the OID for hrStorageType:

<Attribute name="hrStorageType" type="ObjectID">
<Documentation/>
<IsKey>true</IsKey>
<Source>1.3.6.1.2.1.25.2.3.1.2</Source>
</Attribute>

Checking mibtools this is what we see:



Please note the first one on the list (instance 20) is the only one that has a value where the last octet is a 2.  This matches up with "Slot-0 Management Memory" from the first screenshot

.4 is for PartitionsInfo MF
.3 is for Virtual Memory MF

So in summary, "Slot-0 Management Memory" is the ONLY memory component you should be discovering.