network Integration
juniper-firewall (en)


ServicePilot network-juniper-firewall


# Juniper Firewall

##Overview

This package is designed to provide statistics about Juniper Firewall using SNMP.

Description

This package automatically configures the ServicePilot Manager to collect statistics from the Juniper Firewall on which SNMP Service has been configured. The statistics gathered in this way include:

  • Network: Ping Response Time and Interfaces activity
  • System: Cpu, Memory And Sessions
  • VPN: info and traffic per VPN

Requirements

  • SNMP service must be configured and started on the targeted Juniper Firewall (Security: read-only SNMP community and allowed host must be set).

  • Network Flows - It is is necessary to ensure network connectivity between ServicePilot and the monitored device. In case of a network infrastructure using a firewall, all the ports below must be opened:

    • UDP/161 (SNMP): Between ServicePilot Manager and Juniper COS
    • ICMP/Echo Request (Ping): Between ServicePilot Manager and Juniper COS
    • UDP/162 (SNMP Trap): (Optional) Between Juniper COS and ServicePilot Agent
  • ServicePilot Requirements

    • ServicePilot Manager minimum version: 8.5

Installation

Before adding a resource to monitor, make certain that all pre-requisites are in place and if a ServicePilot Agent is required, that it is communicating correctly with the ServicePilot Manager. Resources can be added to ServicePilot configuration in a number of ways:

Add resource using Views Configuration web interface

  1. As an administrative user of ServicePilot, open the ServicePilot web interface.
  2. Navigate to Administration. The Configuration > Views web page will open.
  3. Click on the view in which to place the new resource in the Views hierarchy on the left of the interface. The View editor section will show the existing view contents.
  4. From the Packages list on the right of the interface, click and drag the network-juniper-firewall package into the View editor and let go.
  5. The Package properties dialog box will open to allow resource configuration.
  6. Click OK to close the Package properties dialog box. Note that the dialog box will not close if required parameters are not set.
  7. Click Save to apply the new resource to ServicePilot configuration.

Add resource by changing servicepilot.conf configuration file

Resources can be added to ServicePilot configuration by directly editing the servicepilot.conf or other included YAML configuration files. The ServicePilot web interface can be used to make these changes and apply them to the running configuration.

  1. As an administrative user of ServicePilot, open the ServicePilot web interface.
  2. Navigate to Administration.
  3. Navigate to Configuration > Edit configuration.
  4. Expand the configuration to find the provisioning: and then packages: section of the view in which the new resource will be placed.
  5. Add the example package configuration line below.
  6. Click on the green - package: word to open then Package properties dialog box to allow resource configuration.
  7. Click OK to close the Package properties dialog box. Note that the dialog box will not close if required parameters are not set.
  8. Click Save to apply the new resource to ServicePilot configuration.

Example:

- package: "network-juniper-firewall;;;;;;;;network-juniper-firewall;;127.0.0.1;"