snmpcollector context-based polling

[Anupama Purayannur]

A Check Point firewall device is deployed in VSX (Virtual System Extension) mode, This is a virtualized environment where multiple Virtual Systems (VS) run on a single physical device.

In this setup, SNMP polling to the SMO (Security Management Object) IP defaults to VS0, which is the management plane. Which is currently we are monitoring with snmpcollector. However, to monitor other Virtual Systems (such as VS1, VS2, etc.), SNMP polling must be context-aware-each Virtual System has its own SNMP context.

SNMP v3 supports context-based polling, which allows retrieving metrics from specific virtual systems. This is necessary for gathering resource metrics like CPU and memory per VS.

Here are some references that explain SNMP context-based polling in more detail:

• SNMP Monitoring
• Certifying and Supporting Virtual Systems within Check Point Firewall

Please advise whether SNMPCollector supports this form of context-based polling for Check Point VSX environments? If not, are there any alternatives or roadmaps for support in future versions?

Regards

Anu

[Stephen Danseglio]

Hi Anu!

@Ravishu Arora can comment but the only reference I see in the snmpcollector for VSX was back in 2015. and it concerned a single metric.

Firewall VSX Chassis memory reserved

Steve

------------------------------
Steve Danseglio
Senior Principal Support Engineer (Technical Support Engineer 5)
Broadcom Software-IMS Division
UIM Certified Expert
KCSv6 Practices Certified
Certified Customer Success Manager (CCSM) Level 1
------------------------------

[Anupama Purayannur]

Thanks Steve

[Ravishu Arora]

Hi Anu,

I recommend logging this as an idea on our enhancement request portal to help us gauge the demand for this across our community of users, helping me prioritize it in our backlog.

------------------------------
Principal Product Manager
Broadcom Software
------------------------------