Smarts IP: Discovery of Checkpoint Firewall is missing interfaces because SNMP v3 is not enabled

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:




Smarts IP was only discovering 6 interfaces on a Checkpoint Firewall, which had a total of 33 interfaces.  The Vendor requires that SNMP v3 be enabled.  After enabling and trying to discover the device via SNMP v3 only 6 interfaces were showing up as with SNMP v2.

Environment

VMware Smart Assurance - SMARTS

Cause

In the environment that encountered this issue, the "context" field was empty in the SNMP v3 credentials. Whenever SNMP v3 is used for discovery, you must verify every part of the authentication from user to context field, and so on. If any part of the credentials are incorrect or missing, or fields are empty, Smarts will not complete a full and proper SNMP v3 discovery, even though Smarts will show the device was discovered using SNMP v3.

Resolution

In the environment that encountered this issue, after finding and entering the correct Context name, the device was discovered properly along with all 33 interfaces.