Policy monitoring through SNMP

[DamianE]

It is possible to monitor the number of active sessions through a specific policy using SNMP?

Like its shown in the fortiview.

 

I couldn't find the right OID in the MIB file. 

The finaI result is to to take an alert if the session count falls in an specifict policy

[sjoshi]

Dear DamianE,

All the possible OID can be download from FGT and you can use tool to retrieve those OID

Below is one of the example on how to check the OID

https://community.fortinet.com/t5/FortiGate/Technical-Tip-The-correct-OID-to-monitor-each-interface-....

[ebilcari]

It appears that this is not implemented in the SNMP agent. Currently the only information available for policies are bytes and packets count and the last used timer.

If you think that this values should be included as an OID, I would suggest to submit a NFR over your local Fortinet representatives.

[DamianE]

Thanks for your reply, these are the OIDs tha you talking about, right?

I try to use these OIDs to get the same conclusion for now, but it will be very helpfull if we have the specifict OID for that in a future.

[ebilcari]

Yes, I think: fgFwPolLastUsed -  .1.3.6.1.4.1.12356.101.5.1.2.1.1.4  {How many minutes since last used} can give an alert on the monitoring system if one of the policies is not being used for a long time, similar result like the count drop you are trying to achieve.

[DamianE]

I make a walk to the header of the table (1.3.6.1.4.1.12356.101.3.2.1) and only return one row....

Do you know what i could to add to de OID to consult the information for the policy ID 2 or 3 for example?

[ebilcari · Accepted solution]

The full OID should be like this: .1.3.6.1.4.1.12356.101.5.1.2.1.1.4.1.6  where .1.3.6.1.4.1.12356.101.5.1.2.1.1.4.1[.6] the number "6" is the policy ID 

The OID value:  09/29/2023 14:24 (20 second(s) ago)

[DamianE]

I understand now, thanks!!!

So if in the future could add de session count for the it's would be great!!!