# Checkpoint Firewall
Overview
This package is built to monitor Checkpoint Firewall devices using SNMP. Statistics are collected for a single device , in order to provide an overall view of the status and health of the different system and board components of the device.
Description
This package automatically configures the ServicePilot Manager to collect statistics from the Checkpoint Firewall on which SNMP Service
has been configured. The statistics gathered in this way include:
- System: CPU, memory and Disk
- Interfaces activity (interfaces will be automatically discovered)
- Fan, Temperature and Power Supply
Requirements
SNMP Service
must be configured (Security: read-only SNMP community and allowed host must be set) and started on each target device.Network Flows - It is necessary to ensure network connectivity between ServicePilot and the monitored device. In case of a network infrastructure with a firewall, all of the following flows must be opened:
- UDP/161 (SNMP): Between ServicePilot Manager and Checkpoint Firewall
- ICMP/Echo Request (Ping): Between ServicePilot Manager and Checkpoint Firewall
- UDP/162 (SNMP Trap): (Optional) Between Checkpoint Firewall and ServicePilot Agent
ServicePilot Requirements
- ServicePilot Manager minimum version: 8.5
Installation
Before adding a resource to monitor, make certain that all pre-requisites are in place and if a ServicePilot Agent is required, that it is communicating correctly with the ServicePilot Manager.
Add resource using Views Configuration web interface
- As an administrative user of ServicePilot, open the ServicePilot web interface.
- Navigate to Administration. The Configuration > Views web page will open.
- Click on the view in which to place the new resource in the Views hierarchy on the left of the interface. The View editor section will show the existing view contents.
- From the Packages list on the right of the interface, click and drag the network-checkpoint-firewall package into the View editor and let go.
- The Resource properties dialog box will open to allow resource configuration.
- Click OK to close the Resource properties dialog box. Note that the dialog box will not close if required parameters are not set.
- Click Save to apply the new resource to ServicePilot configuration.
License
Object Type | License object Consumed | Condition |
---|---|---|
Firewall Summary | 1 | |
System Information | 1 | |
ICMP Ping | 1 | If Ping enabled |
HA Diagnostics | 1 | If HA Diagnostics enabled |
Network Interfaces | 1 per interface monitored | If Enable Interface Monitoring enabled and interfaces selected |
Fans | 1 per fan table entry | If Fans enabled |
Power Supplies | 1 per power supply table entry | If Power Supplies enabled |
Temperature Sensors | 1 per temperature sensor table entry | If Temperature Sensors enabled |
CPUs | 1 per CPU table entry | If Multiple CPUs enabled |
Disks | 1 per disk table entry | If Multiple Disks enabled |
Key field notes
In the Monitoring Policies tab, specify the policy or policies to apply to the resource
Basic Parameters tab:
- IP address: Specify the IP address of the Checkpoint Firewall, as resolvable by the machine on which ServicePilot Manager is running
Interfaces tab:
- Enable Interface Monitoring: tick to get statistics for the following interfaces.Set it off not to get statistics for interfaces.
- {Optional} Ignored Interfaces names separated with '|': Specify name(s) of interface(s) NOT to be monitored
- {Optional} Allowed Interfaces names separated with '|': Specify name(s) of interface(s) to be monitored
Monitoring Options tab:
- Fans: tick to get statistics for all fans
- Power Supplies: tick to get statistics for all power supplies
- Temperature Sensors: tick to get statistics for all temperature sensors
- Multiple CPUs: tick to get statistics for individual CPUs
- Multiple Disks: tick to get statistics for individual disks
- HA diagnostics: tick to get high availability status information
- Ping: tick to include a Ping object
Note: Each element of the ignored/allowed interface lists is a regular expression as defined by Like Operator (Visual Basic)
Notes
MIB Used:
- CHECKPOINT-MIB