ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Can Spectrum monitor the functionality of Palo Alto Firewalls running in a HA pair.

book

Article ID: 239285

calendar_today

Updated On:

Products

CA Spectrum DX NetOps

Issue/Introduction

Customer had an issue with a Palo Alto Firewalls running in a FT pair. Spectrum did not lose icmp/snmp with the devices in the pair. However, Spectrum did not alarm/event that there was a functionality problem. Specifically if there is a fail over between the HA pair.

Environment

Release : Any

Component : Spectrum Alarm

Resolution

Verified with the vendor there is no specific mib attribute that Spectrum can monitor for HA failover.

Spectrum currently supports 655 different traps from Palo Alto device which 45 are specific to HA.

Please review the $SPECROOT/SS/CsVendor/Palo_Alto/AlertMap file on the SpectroSERVER system for the traps that are currently supported.