Can Spectrum monitor the functionality of Palo Alto Firewalls running in a HA pair.

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

Customer had an issue with a Palo Alto Firewalls running in a FT pair. Spectrum did not lose icmp/snmp with the devices in the pair. However, Spectrum did not alarm/event that there was a functionality problem. Specifically if there is a fail over between the HA pair.

Environment

Release : Any

Component : Spectrum Alarm

Resolution

Verified with the vendor there is no specific mib attribute that Spectrum can monitor for HA failover.

Spectrum currently supports 655 different traps from Palo Alto device which 45 are specific to HA.

Please review the $SPECROOT/SS/CsVendor/Palo_Alto/AlertMap file on the SpectroSERVER system for the traps that are currently supported.