PaloAlto - HA monitoring

[jkw117@msn.com]

Ok, so to put it simply.
I have a PaloAlto Firewall setup in HA. So basically each device has the same config, but two different IP's. There's no "cluster" ip.
So any recommendations on how to get cacti to keep monitoring the interfaces etc, even when it fails over other then monitoring both boxes? Or graphing everything on both and then merging graphs? (I'm just thinking of the nightmare)

[r4yfx]

So why poll both machines, and then just pull out the graphs that you want to see in one page?

[jkw117@msn.com]

The only issue is that ie, I may poll interface 0/4 on box1 (active) and get data but then on Box2 the inactive one I get 0's and possibly some minimal heartbeat traffic. Then when it fails over, I the data on Box2 but nothing on Box1. I could do an aggregate, but considering it's about 20 ports, plus 80 vlan's of traffic, having to poll both, and then do an aggregate? Could get a bit messy and complicated.

[jkw117@msn.com]

I figured this out, by doing queries against the internal interface which fails over between the two boxes (same IP on both) So which ever is the active one gives me the active stats.