This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PRTG failing to monitor services after sophos upgrade to v18

Not sure with this one, pre-upgrade from v17-mr12 to SFOS 18.0.1 MR-1-Build396, all Firewall monitoring worked in PRTG. After the upgrade, PRTG cannot access info from services,memory etc. it can still ping and `see' the nic cards. Our remaining two Firewalls that are still on v17 mr12 remain monitored correctly.

So to me, something has been upset/broken in SNMP between V18 and PTRG. So for now, have turned off in PTRG monitoring on the v18 Firewall- services,memory etc.

Looks like when I upgrade the other two Firewalls to v18, I will have the same issue.

Any advice on this problem?

Thanks

Andrew

This thread was automatically locked due to age.

0 rfcat_vk over 4 years ago

Hi Andrew,

does PRTG use SNMP calls to collect data? I think there are fixes scheduled for SNMP issues in a MR, not sure which one?

You might lie to start a support case.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Andrew Fletcher1 over 4 years ago in reply to rfcat_vk

Hi Ian

Yes, PRTG uses SNMP to collect data, I did raise a support call with Sophos, but did not really get the response I was hopping for... I don't think I managed to get over the problem to the allocated tech correctly. I will have another go on Monday.

Andrew
Cancel
Vote Up 0 Vote Down

Cancel
0 VikenNajarian over 4 years ago

Hello,

There is a new MIB to monitor v18 XG with SNMP.

I tested it on PRTG, and it works for some sensors, the memory percent is bugged (always 0% or 100%), and the CPU percent sensor is still missing.

If you can make it work on your side please tell me when it's done :)

Regards

Viken

XG Certified Architect

Sophos Gold Partner - Reseller from Lyon, France
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick Moubarak over 4 years ago

Hi

V18 help refers to the new SNMP MIBs:

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/SNMP.html

I tried it on PRTG and it works. I did both the auto discovery and adding the OID manually...

Hope that helps
Cancel
Vote Up 0 Vote Down

Cancel
0 VikenNajarian over 4 years ago in reply to Patrick Moubarak

Hi On your side you can add a cpu percent usage sensor on prtg on a v18 xg unit ???

Viken

XG Certified Architect

Sophos Gold Partner - Reseller from Lyon, France
Cancel
Vote Up 0 Vote Down

Cancel
0 Andrew Fletcher1 over 4 years ago in reply to VikenNajarian

These are the ones that worked/are working in v17 but not in V18

Tried the V18 MIB,(complete) it fails to load when adding sensors...

Tried just adding the cpu percent only as requested, that fails as:
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick Moubarak over 4 years ago in reply to Andrew Fletcher1

Hey Andrew,

I tried the following:

Grab the v17 & v18 MIBs from the ZIP and load them in the PRTG MIB Importer V3.5.8, this gives OIDB Libraries that I copied to:

C:\Program Files (x86)\PRTG Network Monitor\snmplibs

I have two different ones there that I called: SophosXG17.oidlib & SophosXG18.oidlib

Discovered an XG v17.5 MR12 VM & an XG 135 v18 MR1 in PRTG Network Monitor and added Custom SNMP Sensors from SNMP Library using the appropriate .oidlib for each.

The v18 firewall, PRTG added a lot more standard sensors (via auto discovery) like the standard CPU Load sensor https://www.paessler.com/manuals/prtg/snmp_cpu_load_sensor

The v17.5 firewall, PRTG uses the Sophos XG-FIREWALL-MIB cpu status OID 1.3.6.1.4.1.21067.2.1.2.2.1.0 for CPU monitoring.

You are correct, this SNMP OID will not work on XG v18, I think you can use the standard SNMP sensor instead.

Actually it seems that all OIDs that are under 1.3.6.1.4.1.21067. will not work in XGv18. These are the v17 OIDs.

V18 uses OIDs under 1.3.6.1.4.1.2604. for custom MIBs... I am using standard PRTG sensors for CPU, memory, disk, interface traffic... on v18

I hope that helps

Patrick
Cancel
Vote Up 0 Vote Down

Cancel
0 Andrew Fletcher1 over 4 years ago in reply to Patrick Moubarak

Thanks Patrick

I did re-open my support request with Sophos, and have also added your findings to this.

Andrew
Cancel
Vote Up 0 Vote Down

Cancel