check_paloalto 0.3.2

check_paloalto is a Nagios/Icinga plugin for Palo Alto Next Generation Firewalls. It is written in Python and based on the PA REST API.

nagios_check_paloalto is a Nagios/Icinga plugin for Palo Alto Next Generation Firewalls. It is written in Python and based on the PA REST API.

Tested on:

• PA-500 v6.0.1 - v6.0.9

• PA-3050 v6.0.9 - 7.1.9

Documentation

http://nagios-check-paloalto.readthedocs.org/en/latest/

Quickstart

Please make sure you have python-dev and libxslt1-dev installed on your machine.

To install nagios_check_paloalto:

$ pip install check_paloalto --upgrade

or use:

$ pip3 install check_paloalto --upgrade

The plugin requires a token to get information from the PA-REST-API. Please see the following link for more information: http://nagios-check-paloalto.readthedocs.org/en/latest/configuration.html#token

Usage

Command-line usage:

usage: check_paloalto [-h] -H HOST -T TOKEN [-v] [-t TIMEOUT] [--reset]
                  [--version]
                  {diskspace,certificates,load,useragent,environmental,sessinfo,thermal,throughput}
                  ...

positional arguments:
  {diskspace,certificates,load,useragent,environmental,sessinfo,thermal,throughput}
    diskspace           check used diskspace.
    certificates        check the certificate store for expiring certificates:
                        Outputs is a warning, if a certificate is in range.
    load                check the CPU load.
    useragent           check for running useragents.
    environmental       check if an alarm is found.
    sessinfo            check important session parameters.
    thermal             check the temperature.
    throughput          check the throughput.

optional arguments:
  -h, --help            show this help message and exit

Connection:
  -H HOST, --host HOST  PaloAlto Server Hostname
  -T TOKEN, --token TOKEN
                        Generated Token for REST-API access

Debug:
  -v, --verbose         increase output verbosity (use up to 3 times)
  -t TIMEOUT, --timeout TIMEOUT
                        abort check execution after so many seconds (use 0 for
                        no timeout)
  --reset               Deletes the cookie file for the throughput check.

Info:
  --version             show program's version number and exit

History

0.3.2 (2017-16-05)

• Fixed issue #8: Measuring throughput on multiple identically configured PA’s fails

0.3.1 (2017-10-03)

• Improvement: It is no longer necessary to reset the internal cookie when upgrading PA.

• Renamed performance data label for throughput command.

• Removed the the unit of measurement (UOM) for throughput command

0.3 (2017-27-02)

• Support for Python 3.5 added

• Minor code improvements

• Changed the the unit of measurement (UOM) according to official Nagios-Documentation (thanks to Ios77)

0.1.6 (2016-06-05)

• Added script version switch

• Improved error handling

• Updated documentation

• Upgraded dependencies

0.1.5 (2016-29-04)

• Fixed a argparse bug

0.1.4 (2016-29-04)

• Added functionality to monitor state of the user-agents

• Added script timeout switch

• Improved error handling

• Improved functionality of sessinfo command

0.1.3 (2015-14-09)

• Disabled warnings for insecure requests to support older installations: https://urllib3.readthedocs.org/en/latest/security.html

0.1.2 (2015-14-09)

• Fixed a bug for parsing args in python3.

• Enabled warnings for insecure requests: https://urllib3.readthedocs.org/en/latest/security.html

• Changed format for setup.cfg.

• Updated docs.

0.1.1 (2015-10-09)

• Support Python 2.7, 3.3, 3.4.

• Support PyPi.

• Included tests.

• Improved performance.

• Improved output and debugging.