Page 1 of 3

Monitor Sophos Firewall Through Nagios

Posted: Mon May 02, 2016 6:00 am
by SJ04
Hello There,

I am in trouble with monitoring the Sophos Firewall via Nagios. I have downloaded the Firewall MIB file and when i trying to get the Value of Firewall i am having this Error.

Code: Select all

/usr/local/nagios/libexec/check_snmp -H 192.168.1.1 -o .1.3.6.1.4.1.9789 1
External command error: Error in packet
Reason: (noSuchName) There is no such variable name in this MIB.
Failed object: iso.3.6.1.4.1.9789
i have also copied the MIB file to SNMP/MIB directory but it still didnt work. Will be really Appricating if someone can help me out.

thanks

SJ04

Re: Monitor Sophos Firewall Through Nagios

Posted: Mon May 02, 2016 1:00 pm
by rkennedy
What is the output of a SNMP walk? Do you have a community string setup?

Code: Select all

snmpwalk -v 1 -c public 192.168.1.1 1.3.6.1.4.1.9789

Re: Monitor Sophos Firewall Through Nagios

Posted: Tue May 03, 2016 5:11 am
by SJ04
rkennedy wrote:What is the output of a SNMP walk? Do you have a community string setup?

Code: Select all

snmpwalk -v 1 -c public 192.168.1.1 1.3.6.1.4.1.9789
Hey , I can make SNMP walk and there is no Community String setup.

the Output of the SNMP walk is the all Traps. Please Let me know.

Re: Monitor Sophos Firewall Through Nagios

Posted: Tue May 03, 2016 10:33 am
by rkennedy
SJ04 wrote:
rkennedy wrote:What is the output of a SNMP walk? Do you have a community string setup?

Code: Select all

snmpwalk -v 1 -c public 192.168.1.1 1.3.6.1.4.1.9789
Hey , I can make SNMP walk and there is no Community String setup.

the Output of the SNMP walk is the all Traps. Please Let me know.
Can you show us the full input / output of the SNMP walk?

Re: Monitor Sophos Firewall Through Nagios

Posted: Thu May 05, 2016 3:12 pm
by SJ04
rkennedy wrote:
SJ04 wrote:
rkennedy wrote:What is the output of a SNMP walk? Do you have a community string setup?

Code: Select all

snmpwalk -v 1 -c public 192.168.1.1 1.3.6.1.4.1.9789
Hey , I can make SNMP walk and there is no Community String setup.

the Output of the SNMP walk is the all Traps. Please Let me know.
Can you show us the full input / output of the SNMP walk?
Hey Rkennedy
Thank you so much for your Time but this SNMP walk will be for the FIrewall and my All interfaces and Gateways are Listed there so many Company Realted Information so i am not SO sure to make this SNMP Walk Public. Can you please Let me know how i can check by myself the Value and Monitor the Sophos Firewall.

Thanks

SJ04

Re: Monitor Sophos Firewall Through Nagios

Posted: Thu May 05, 2016 3:57 pm
by tgriep
Can you post your MIB file so we can review it?

Running the snmpwalk will show you what can be monitored on the device but you have to figure out what you want to monitor on the firewall and create a check for that.

Re: Monitor Sophos Firewall Through Nagios

Posted: Fri May 06, 2016 1:43 pm
by SJ04
tgriep wrote:Can you post your MIB file so we can review it?

Running the snmpwalk will show you what can be monitored on the device but you have to figure out what you want to monitor on the firewall and create a check for that.
Hi @tgriep,

i am adding the MIB file and it will be really Helpful if you can let me know How can i use this MIB file and get my Output whcích I need to monitor.
one more question do we need to Install or Copy This Firewall MIB to The Nagios Server for the getting the Trap.

Thanks

SJ04

Re: Monitor Sophos Firewall Through Nagios

Posted: Fri May 06, 2016 1:56 pm
by tgriep
Thanks for the MIB file but the question, what do you want to monitor?
The MIB file has a list of what can be monitored but you need to choose what you want.

Re: Monitor Sophos Firewall Through Nagios

Posted: Fri May 06, 2016 2:04 pm
by SJ04
I want to Monitor the Internet Uplink, POrt Scan Detacted, License Expiry, HA Node is Master and Salve, Interface are Up and Down Status adn if possible the Basic Monitoring Like CPU usage , Rm Usage and SO On.

Thanks for your Help

Re: Monitor Sophos Firewall Through Nagios

Posted: Fri May 06, 2016 2:18 pm
by tgriep
Here is a command you use to show you the OID number and the associated description to it.

Code: Select all

snmptranslate -m /usr/share/snmp/mibs/ASTARO-MIB.txt -Tz
You can use the output to look for the OID you can use for the check_snmp commands you want.