Spectrum is discovering Virtual FW CheckPoint in Initial Status

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

We are trying to discover Virtual CheckPoint FW in Spectrum. The physical firewall is discovered ok, but the virtual ones are in Initial Status even though the SNMP appears to be ok.

 

Environment

Release : 10.4.x, 21.2, 22.2

Component : Spectrum Core / SpectroSERVER / Discovery

Cause

Config issue with Checkpoint Firewall

Resolution

The issue was the SNMP config on the Checkpoint Firewall device. It has been fixed adding the line below line to check all the context. 

set snmp usm user <User_Name> vsid <VSID>

Example:

set snmp usm user CASpectrum vsid all

Once this was setup, the virtual Firewalls were discovered with no further problems.

Additional Information

Checkpoint Monitoring Link