How to discover the Checkpoint Security Gateway's Data plane (dplane) in DX NetOps Spectrum

Products

• Spectrum

Issue/Introduction

Checkpoint firewalls with management/data planes under different v3 contexts, can these be discovered in DX NetOps Spectrum via API call?

For example, when walking by default with sapwalk you get the management plane.  To get the data plane you need to add -x dplane in DX NetOps Portal but what about Spectrum? How can we add the dplane there via API?

 

 

Environment

Data plane modeling in DX NetOps Spectrum applies to all current supported versions.

Consolidation of the planes between DX NetOps Spectrum and DX NetOps Portal applies to versions greater than 23.3.4

Resolution

While we do not document anything for dplane specifically in DX NetOps Spectrum, context modeling was added in 21.2.6

 

Add Context Name Information You can add the SNMPv3 context name value to be sent with SNMPv3 messages for a particular device. From 21.2.6, you can add a context name to an SNMPv3 profile while creating it. For more information, see the Context Name section on the Edit SNMPv3 Profiles Dialog page. Follow these steps:

• Select the model that you want to modify, and click the Information tab in the Component Detail panel.
• Expand the DX NetOps Spectrum Modeling Information subview, and click set in the SNMP Community Stringfield.
• Add the context name value to the SNMP Community String field. For example, if the current SNMP community string is:#v3/P:authPass:privPass/myuserid
• To insert a context name value of ‘quark,’ add ‘quark’ to the SNMP community string as follows:#v3/P:authPass:privPass/quark/myuserid

this is documented at  Add Context Name Information

 

To clarify what we saw after getting this to work with discovery console

 

 

 

 

 

Additional Information

The sync of dplane context between DX NetOps Portal and DX NetOps Spectrum has been added in 23.3.4 under Defect DE567634 and user story US894561.  As long as the dplane has been added in DX NetOps Spectrum and DX NetOps Portal, nothing else is needed and a synch of the 2 products will consolidate both planes between the 2 products.