Menu

SNMP monitoring for a checkpoint firewall

I had a need to monitor a firewall via SNMP on an checkpoint firewall , allowing that is 4 simple  steps
  • First need to create the community,
Edit the file "/etc/snmp/snmpd.users.conf" For example community "public" will look like this:
 "rouser public noauth
rocommunity public"
  • start SNMP using cpconfig :
[[email protected]]# cpconfig
This program will let you re-configure
your Check Point products configuration.


Configuration Options:
----------------------
(1)  Licenses and contracts
(2)  Administrator
(3)  GUI Clients
(4)  SNMP Extension
(5)  PKCS#11 Token
(6)  Random Pool
(7)  Certificate Authority
(8)  Certificate's Fingerprint
(9)  Disable Advanced Routing
(10) Configure Check Point CoreXL
(11) Automatic start of Check Point Products

(12) Exit

Enter your choice (1-12) :4



Configuring SNMP Extension...
=============================
The SNMP daemon enables Check Point products module
to export its status to external network management tools.
Would you like to disable Check Point products SNMP daemon ? (y/n) [n] ? y
  • And last thing restart the SNMP  service in the machine
[[email protected]]# service snmpd restart
Stopping snmpd:                                            [  OK  ]
Starting snmpd:                                            [  OK  ]
  • After that just make sure to enable SNMP  to start at boot
[[email protected]]# chkconfig snmpd on

That’s it, now you can monitor the firewall from any monitoring software.

This configuration applies to a firewall running on Secure platform (SPLAT) or Linux OS.



Hope this post was helpful, If it was please consider a donation:
BTC Address: 1CnyMpjd1RntRDxSus2hu2aDMyzL4Kj29N

LTC Address: LUqrKbzGihTU2GEnL3EwsuuLHCsxCJMdtR

3 comments:

  1. Thanks for this post! As a network manager I was looking online for different SNMP Monitoring because as you know, you can't have certain operations fail. That's when I came across your blog post about monitoring for a checkpoint firewall. Thanks again for this you have definitely helped educate me.

    ReplyDelete
    Replies
    1. Glad to hear !

      did you find what you were looking for ?
      in case something is missing I will be happy to fill in the blanks..

      Delete
  2. Well done Valentin , useful info , thanks
    Yuri

    ReplyDelete