search cancel

Missing CPU and Memory utilization of the StoneSoft device in Performance TAB

book

Article ID: 229097

calendar_today

Updated On:

Products

CA Spectrum DX NetOps

Issue/Introduction

We found that in Spectrum StoneSoft firewall not updating CPU/Memory data in Spectrum performance tab

 

Cause

The Stonesoft device is not certified in Spectrum. It is modeled as a Generic SNMP device (GnSNMPDev):

Environment

Release : 10.4

Component : Spectrum Certification

Resolution

The CPU and Memory utilization are found in the STONESOFT-FIREWALL-MIB file:

fwCpuName   OBJECT-TYPE
              SYNTAX        DisplayString (SIZE (0..255))
              MAX-ACCESS    read-only
              STATUS        current
              DESCRIPTION   "Name of data current line concern"
              ::= { fwCpuStatsEntry 2 }

fwCpuTotal  OBJECT-TYPE
              SYNTAX        Unsigned32
              UNITS         "percent"
              MAX-ACCESS    read-only
              STATUS        current
              DESCRIPTION   "The total CPU load percentage"
              ::= { fwCpuStatsEntry 3 }

fwMemBytesTotal OBJECT-TYPE
              SYNTAX      CounterBasedGauge64
              UNITS       "bytes"
              MAX-ACCESS  read-only
              STATUS      current
              DESCRIPTION "Number of available bytes of physical memory"
              ::= { fwMemoryInfo 4 }

fwMemBytesUsed OBJECT-TYPE
              SYNTAX      CounterBasedGauge64
              UNITS       "bytes"
              MAX-ACCESS  read-only
              STATUS      current
              DESCRIPTION "Amount of memory being in use"
              ::= { fwMemoryInfo 5 }

fwMemBytesUnused OBJECT-TYPE
              SYNTAX      CounterBasedGauge64
              UNITS       "bytes"
              MAX-ACCESS  read-only
              STATUS      current
              DESCRIPTION "Amount of unused bytes of physical memory"
              ::= { fwMemoryInfo 6 }

 

1. Click on the " + " button to compile the Stonesoft MIB files in MIB Tools:

2. Compile the following MIB files from the Stonesoft vendor:

  • STONESOFT-FIREWALL-MIB
  • STONESOFT-IPS-MIB
  • STONESOFT-NETNODE-MIB
  • STONESOFT-SMI-MIB

3. The compiled MIB files are displayed under the Stonesoft Corp folder.

4. Map the fwCpuTotal and fwCpuName objects.

5. Random attribute IDs will be assigned to those OIDs:

6. Map the fwMemBytesTotal, fwMemBytesUsed, and fwMemBytesUnused objects.

7. Random attribute IDs will be assigned to those OIDs:

8. Move the name of the following attributes to the right-hand side of the Attributes TAB:

  • fwCpuTotal
  • fwCpuName
  • fwMemBytesTotal
  • fwMemBytesUsed
  • fwMemBytesUnused
  • NRM_CPUUtilAttr (0x12e2d)
  • NRM_CPUUtilNameAttr (0x12e2e)
  • NRM_MemoryFreeAttr (0x12e38)
  • NRM_MemoryTotalAttr (0x12e39)
  • NRM_MemoryUsedAttr (0x12e37)

If the fw* attribute names are not visible, click on the refresh button.

9. Click on the Edit button to modify the values of the attributes.

10. Set the following in the attribute redirection (NRM_*): Note that the fw* attribute IDs should be different as they are assigned randomly in the MIB Tools.

  • NRM_CPUUtilAttr (0x12e2d) --> fwCpuTotal
  • NRM_CPUUtilNameAttr (0x12e2e) --> fwCpuName
  • NRM_MemoryFreeAttr (0x12e38) --> fwMemBytesUnused
  • NRM_MemoryTotalAttr (0x12e39) --> fwMemBytesTotal
  • NRM_MemoryUsedAttr (0x12e37) --> fwMemBytesUsed

11. After saving the changes:

12. Right-click on the Stonesoft device and choose Reconfiguration --> Reconfigure Model

13. The sources of the CPU and Memory Thresholds are Attribute Redirection.

14. The CPU and Memory Utilization are now visible in the Performance TAB.

Additional Information

You may see CPU utilization above 100%, and those values are coming from the fwCpuTotal object which is in percentage. Engage the vendor of the device as the fwCpuTotal values are coming from the device.

 

Conflict errors loading customized MIB in Spectrum MIBTools

 

Attachments

1637775271202__ngfw-mibs-6.3.0.zip get_app