SNMP monitoring for a checkpoint firewall

I had a need to monitor a firewall via SNMP on an checkpoint firewall , allowing that is 4 simple  steps

• First need to create the community,

Edit the file "/etc/snmp/snmpd.users.conf" For example community "public" will look like this:

 "rouser public noauth

rocommunity public"

• start SNMP using cpconfig :

[Expert@fw]# cpconfig

This program will let you re-configure

your Check Point products configuration.

Configuration Options:

----------------------

(1)  Licenses and contracts

(2)  Administrator

(3)  GUI Clients

(4)  SNMP Extension

(5)  PKCS#11 Token

(6)  Random Pool

(7)  Certificate Authority

(8)  Certificate's Fingerprint

(9)  Disable Advanced Routing

(10) Configure Check Point CoreXL

(11) Automatic start of Check Point Products

(12) Exit

Enter your choice (1-12) :4

Configuring SNMP Extension...

=============================

The SNMP daemon enables Check Point products module

to export its status to external network management tools.

Would you like to disable Check Point products SNMP daemon ? (y/n) [n] ? y

• And last thing restart the SNMP  service in the machine

[Expert@fw]# service snmpd restart

Stopping snmpd:                                            [  OK  ]

Starting snmpd:                                            [  OK  ]

• After that just make sure to enable SNMP  to start at boot

[Expert@fw]# chkconfig snmpd on

That’s it, now you can monitor the firewall from any monitoring software.

This configuration applies to a firewall running on Secure platform (SPLAT) or Linux OS.



Hope this post was helpful, If it was please consider a donation:
BTC Address: 1CnyMpjd1RntRDxSus2hu2aDMyzL4Kj29N

LTC Address: LUqrKbzGihTU2GEnL3EwsuuLHCsxCJMdtR