This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Monitoring SOPHOS XG with ZABBIX

Hello,

I monitor SOPHOS XG through ZABBIX and recently I noticed that I am not receiving HA status, we use the firewall in version 18, and this collection worked. After updating to version 19 the collection stopped.

Does anyone have an idea how to resolve this?

This thread was automatically locked due to age.

0 Raphael Alganes over 1 year ago

Ho Oriom ,

Thank you for reaching out to Sophos Community and hope you are well.

May we check if you did use the MIB from Zabbix? https://www.zabbix.com/integrations/sophos It seems it is designed for V18, if in case you have opted to use this Zabbix official.

Kindly try using MIB for Sophos Firewall and import to Zabbix: https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Other-documents/SOPHOS-MIB.txt?la=en

Kindly let us know how it goes. Thanks for your time and patience and Thank you for choosing Sophos

Cheers,

Raphael Alganes
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 TingYu over 1 year ago in reply to Raphael Alganes

first file V18 one, import no problem, but many items can not get data XG.

the 2nd MIB file can not import, see error message:

Unable to parse at line 1 (near "-- *****************************************************************").

Please kindly advise.
Cancel
Vote Up 0 Vote Down

Cancel
0 RickardNordahl over 1 year ago in reply to TingYu

Hi.

We monitor the HA status on Version 19,x and we get data. We use the following OID's

DeviceHAstate .1.3.6.1.4.1.2604.5.1.4.4.0

HAstatus .1.3.6.1.4.1.2604.5.1.4.1.0

PeerHAState .1.3.6.1.4.1.2604.5.1.4.5.0

Device should report 3 if the cluster is OK

HAstatus and PeerHaState should report 1 if everything is ok

//Rickard
Cancel
Vote Up 0 Vote Down

Cancel
0 TingYu over 1 year ago in reply to RickardNordahl

great, thanks Rickard. I will try it out. thanks again.
Cancel
Vote Up 0 Vote Down

Cancel
0 RickardNordahl over 1 year ago in reply to TingYu

Hope it works out for your monitoring

//Rickard
Cancel
Vote Up 0 Vote Down

Cancel
0 TingYu over 1 year ago in reply to RickardNordahl

yes, Richard, they worked for me. thank you very much.

One more thing, you have OID's for mem utilization? thanks in advance.
Cancel
Vote Up 0 Vote Down

Cancel
0 RickardNordahl over 1 year ago in reply to TingYu

Hi TingYu.

I have the following OID for memory monitoring.

memoryCapacity .1.3.6.1.4.1.2604.5.1.2.5.1.0.##WILDVALUE##

memoryPercentUsage .1.3.6.1.4.1.2604.5.1.2.5.2.0.##WILDVALUE##

swapCapacity .1.3.6.1.4.1.2604.5.1.2.5.3.0.##WILDVALUE##

swapPercentUsage .1.3.6.1.4.1.2604.5.1.2.5.4.0.##WILDVALUE##

//Rickard
Cancel
Vote Up 0 Vote Down

Cancel
0 TingYu over 1 year ago in reply to RickardNordahl

Thank you very much, Rickard.
Cancel
Vote Up 0 Vote Down

Cancel
0 dabance d over 1 year ago in reply to TingYu

how to fix the template import error
Cancel
Vote Up 0 Vote Down

Cancel
0 TingYu over 1 year ago in reply to dabance d

1. go to "configuration"

2. go to "host"

3. select your XG firewall

4. click on "items"

5. I clone one items (which item exactly to clone, I do not remember, but I do not think matter that much)

6. then on the cloned item screen, you will see OID field, look at the beginning of this thread, Richard gave out OID # that will work, copy and paste his #,

then that is.

I hope the above will help. Sorry, It has been a while, I forgot exactly what I did, but if you have problem to follow my step, maybe you can google "zabbix snmp create a new item", I remembered that was how I got some of help.
Cancel
Vote Up 0 Vote Down

Cancel