Checkpoint Firewall Monitoring

[Pumpi]

Hi @ll,

found a good solution to implement Checkpoint Firewall-1 Monitoring which is also based on RRDTool and Perl.

FwGold
http://www.rotoni.com/index.mpl?page=so ... age=fwgold

Is there a change to get the same functionality with Cacti ?

I'm not a programmer like u

[succulent]

hi,

have you found any solution?

currently I am looking for an fwgold / cacti integration

[Guest]

hi,

have you found any solution?

currently I am looking for an fwgold / cacti integration

[Kenny]

FwGold needs to run on the Management Server and looks into the fw.log for connection-stats and stuff by munging through the output of a "fw log -t" kind of command. Cacti can run on any kind of host, and just needs network-access (and snmpread-access) to query the firewalls.

So there are major differences between Cacti and FwGold (or FwPlatinum, which is related to FwGold)

I prefer the Cacti-approach...

Kenny

[succulent]

[quote="Kenny"]FwGold needs to run on the Management Server and looks into the fw.log for connection-stats and stuff by munging through the output of a "fw log -t" kind of command. Cacti can run on any kind of host, and just needs network-access (and snmpread-access) to query the firewalls.

So there are major differences between Cacti and FwGold (or FwPlatinum, which is related to FwGold)

I prefer the Cacti-approach...

Kenny[/quote]

Yes - but as far as I know fwgold has two parts:

1. a daemon tailing the firewall log and holding counters
2. a process started by cron every 5 minutes, collection the counters, put values into rrd-files, making html-pages

What about replacing the 2nd part by something else, making the values accessible for cacti e.g. Script for UCD-SNMP returning the counters from the fwgold daemon.

So Cacti can poll every 5 minutes per SNMP and draw nice graphs for every type of rule-counter.

What do you think about this?

[Pumpi]

I use the scipts from mgraves found here:

http://forums.cacti.net/about5658.html& ... checkpoint

I have only a problem with negative integers see here:

http://forums.cacti.net/viewtopic.php?t=6838


I hope this helps.

[succulent]

I use the scipts from mgraves found here:

http://forums.cacti.net/about5658.html& ... checkpoint

I have only a problem with negative integers see here:

http://forums.cacti.net/viewtopic.php?t=6838


I hope this helps.

Looks helpful -thx. I will take a deeper look into this in the next days!