@cryptotaxi247 / netdata-1 / commits / 860d97a31

Improve Check Point SNMP monitoring (#22190)

Co-authored-by: ilyam8 <ilya@netdata.cloud>

Costa Tsaousis committed Apr 14, 2026 at 13:08 UTC 860d97a31cd2ca15af8d81ddb7e1dfb1b02b9965
6 files changed +694 -10
src/go/plugin/go.d/config/go.d/snmp.profiles/default/_checkpoint-cluster.yaml new
+92
@@ -0,0 +1,92 @@
1 +# Check Point HA / ClusterXL monitoring (CHECKPOINT-MIB)
2 +# Cluster member state, status code,
3 +# started flag, and the HA problem diagnostic table.
4 +
5 +metrics:
6 + # HA installed flag (0 = not installed, non-zero = installed)
7 + - MIB: CHECKPOINT-MIB
8 + metric_type: gauge
9 + symbol:
10 + OID: 1.3.6.1.4.1.2620.1.5.2.0
11 + name: haInstalled
12 + # TODO: use mapping with 2 dimensions (e.g. installed/absent)
13 + chart_meta:
14 + description: "Whether HA/ClusterXL is installed on this gateway"
15 + family: 'Security/Cluster/Installed'
16 + unit: "{status}"
17 +
18 + # HA member state (displaystring: active, standby, down, ready, init)
19 + - MIB: CHECKPOINT-MIB
20 + symbol:
21 + OID: 1.3.6.1.4.1.2620.1.5.6.0
22 + name: haState
23 + chart_meta:
24 + description: "HA/ClusterXL member state"
25 + family: 'Security/Cluster/State'
26 + unit: "{status}"
27 + mapping:
28 + active: 1
29 + standby: 2
30 + down: 3
31 + ready: 4
32 + init: 5
33 +
34 + # HA started (displaystring: yes, no)
35 + - MIB: CHECKPOINT-MIB
36 + symbol:
37 + OID: 1.3.6.1.4.1.2620.1.5.5.0
38 + name: haStarted
39 + chart_meta:
40 + description: "Whether HA/ClusterXL has been started"
41 + family: 'Security/Cluster/Started'
42 + unit: "{status}"
43 + mapping:
44 + "yes": 1
45 + "no": 2
46 +
47 + # HA status code (integer: 0 = OK, non-zero = problem)
48 + - MIB: CHECKPOINT-MIB
49 + metric_type: gauge
50 + symbol:
51 + OID: 1.3.6.1.4.1.2620.1.5.101.0
52 + name: haStatCode
53 + chart_meta:
54 + description: "HA/ClusterXL numeric status code (0 = healthy)"
55 + family: 'Security/Cluster/Status/Code'
56 + unit: "{code}"
57 +
58 + # HA problem table — one row per cluster diagnostic finding
59 + - MIB: CHECKPOINT-MIB
60 + table:
61 + OID: 1.3.6.1.4.1.2620.1.5.13
62 + name: haProblemTable
63 + symbols:
64 + - OID: 1.3.6.1.4.1.2620.1.5.13.1.4
65 + name: haProblemPriority
66 + metric_type: gauge
67 + chart_meta:
68 + description: "HA problem priority level"
69 + family: 'Security/Cluster/Problem/Priority'
70 + unit: "{priority}"
71 + - OID: 1.3.6.1.4.1.2620.1.5.13.1.5
72 + name: haProblemVerified
73 + metric_type: gauge
74 + chart_meta:
75 + description: "Whether the HA problem has been verified"
76 + family: 'Security/Cluster/Problem/Verified'
77 + unit: "{status}"
78 + metric_tags:
79 + - index: 1
80 + tag: problem_index
81 + - symbol:
82 + OID: 1.3.6.1.4.1.2620.1.5.13.1.2
83 + name: haProblemName
84 + tag: _problem_name
85 + - symbol:
86 + OID: 1.3.6.1.4.1.2620.1.5.13.1.3
87 + name: haProblemStatus
88 + tag: _problem_status
89 + - symbol:
90 + OID: 1.3.6.1.4.1.2620.1.5.13.1.6
91 + name: haProblemDescr
92 + tag: _problem_description
src/go/plugin/go.d/config/go.d/snmp.profiles/default/_checkpoint-firewall-extra.yaml new
+117
@@ -0,0 +1,117 @@
1 +# Check Point firewall extras (CHECKPOINT-MIB)
2 +# Complements the base checkpoint.yaml with logged packets, SIC trust,
3 +# overload drops, and firewall kernel memory pools.
4 +
5 +metrics:
6 + # Logged packets — completes the accepted/rejected/dropped/logged quartet
7 + - MIB: CHECKPOINT-MIB
8 + symbol:
9 + OID: 1.3.6.1.4.1.2620.1.1.7.0
10 + name: fwLogged
11 + chart_meta:
12 + description: "Logged packets per second"
13 + family: 'Security/Firewall/Packet/Logged'
14 + unit: "{packet}/s"
15 +
16 + # Fully-utilized drops — packets dropped because the kernel instance was saturated
17 + - MIB: CHECKPOINT-MIB
18 + symbol:
19 + OID: 1.3.6.1.4.1.2620.1.1.25.26.0
20 + name: fwFullyUtilizedDrops
21 + chart_meta:
22 + description: "Packets dropped per second due to fully utilized firewall instance"
23 + family: 'Security/Firewall/Packet/OverloadDropped'
24 + unit: "{packet}/s"
25 +
26 + # SIC trust state — gateway-to-management authentication
27 + # CHECKPOINT-MIB describes: Not initialized(0), Initialized but not established(1),
28 + # Established(2), Error(3), Unknown(4). The OID is displaystring; devices return
29 + # the numeric code as a string.
30 + - MIB: CHECKPOINT-MIB
31 + symbol:
32 + OID: 1.3.6.1.4.1.2620.1.1.12.0
33 + name: fwSICTrustState
34 + chart_meta:
35 + description: "SIC trust state between gateway and management server"
36 + family: 'Security/Firewall/SIC/Trust'
37 + unit: "{status}"
38 + mapping:
39 + 0: not_initialized
40 + 1: init_not_established
41 + 2: trust_established
42 + 3: error
43 + 4: unknown
44 +
45 + # Firewall kernel memory pool (fwKmem) — distinct from OS-level memory
46 + - MIB: CHECKPOINT-MIB
47 + metric_type: gauge
48 + symbol:
49 + OID: 1.3.6.1.4.1.2620.1.1.26.2.1.0
50 + name: fwKmemSystemPhysicalMem
51 + chart_meta:
52 + description: "Firewall kernel total system physical memory"
53 + family: 'Security/Firewall/KernelMemory/Physical'
54 + unit: "By"
55 + - MIB: CHECKPOINT-MIB
56 + metric_type: gauge
57 + symbol:
58 + OID: 1.3.6.1.4.1.2620.1.1.26.2.2.0
59 + name: fwKmemAvailablePhysicalMem
60 + chart_meta:
61 + description: "Firewall kernel physical memory available for allocation"
62 + family: 'Security/Firewall/KernelMemory/Available'
63 + unit: "By"
64 + - MIB: CHECKPOINT-MIB
65 + metric_type: gauge
66 + symbol:
67 + OID: 1.3.6.1.4.1.2620.1.1.26.2.4.0
68 + name: fwKmemBytesUsed
69 + chart_meta:
70 + description: "Firewall kernel memory bytes in use"
71 + family: 'Security/Firewall/KernelMemory/Used'
72 + unit: "By"
73 + - MIB: CHECKPOINT-MIB
74 + metric_type: gauge
75 + symbol:
76 + OID: 1.3.6.1.4.1.2620.1.1.26.2.8.0
77 + name: fwKmemBytesPeak
78 + chart_meta:
79 + description: "Firewall kernel memory peak bytes used"
80 + family: 'Security/Firewall/KernelMemory/Peak'
81 + unit: "By"
82 + - MIB: CHECKPOINT-MIB
83 + symbol:
84 + OID: 1.3.6.1.4.1.2620.1.1.26.2.15.0
85 + name: fwKmemFailedAlloc
86 + chart_meta:
87 + description: "Firewall kernel memory allocation failures per second"
88 + family: 'Security/Firewall/KernelMemory/FailedAlloc'
89 + unit: "{failure}/s"
90 +
91 + # Firewall heap memory pool (fwHmem)
92 + - MIB: CHECKPOINT-MIB
93 + metric_type: gauge
94 + symbol:
95 + OID: 1.3.6.1.4.1.2620.1.1.26.1.11.0
96 + name: fwHmemBytesUsed
97 + chart_meta:
98 + description: "Firewall heap memory bytes in use"
99 + family: 'Security/Firewall/HeapMemory/Used'
100 + unit: "By"
101 + - MIB: CHECKPOINT-MIB
102 + metric_type: gauge
103 + symbol:
104 + OID: 1.3.6.1.4.1.2620.1.1.26.1.15.0
105 + name: fwHmemBytesPeak
106 + chart_meta:
107 + description: "Firewall heap memory peak bytes used"
108 + family: 'Security/Firewall/HeapMemory/Peak'
109 + unit: "By"
110 + - MIB: CHECKPOINT-MIB
111 + symbol:
112 + OID: 1.3.6.1.4.1.2620.1.1.26.1.21.0
113 + name: fwHmemFailedAlloc
114 + chart_meta:
115 + description: "Firewall heap memory allocation failures per second"
116 + family: 'Security/Firewall/HeapMemory/FailedAlloc'
117 + unit: "{failure}/s"
src/go/plugin/go.d/config/go.d/snmp.profiles/default/_checkpoint-hardware.yaml new
+165
@@ -0,0 +1,165 @@
1 +# Check Point hardware monitoring (CHECKPOINT-MIB)
2 +# Power supply status, voltage sensors, and RAID volume/disk state.
3 +# Complements the fan and temperature sensors already in checkpoint.yaml.
4 +
5 +metrics:
6 + # Power supply table
7 + - MIB: CHECKPOINT-MIB
8 + table:
9 + OID: 1.3.6.1.4.1.2620.1.6.7.9.1
10 + name: powerSupplyTable
11 + symbols:
12 + - OID: 1.3.6.1.4.1.2620.1.6.7.9.1.1.2
13 + name: powerSupplyStatus
14 + chart_meta:
15 + description: "Power supply operational status"
16 + family: 'Hardware/Sensor/PowerSupply/Status'
17 + unit: "{status}"
18 + mapping:
19 + Up: 1
20 + Down: 2
21 + Unknown: 3
22 + metric_tags:
23 + - symbol:
24 + OID: 1.3.6.1.4.1.2620.1.6.7.9.1.1.1
25 + name: powerSupplyIndex
26 + tag: psu_index
27 +
28 + # Voltage sensor table
29 + - MIB: CHECKPOINT-MIB
30 + table:
31 + OID: 1.3.6.1.4.1.2620.1.6.7.8.3
32 + name: voltageSensorTable
33 + symbols:
34 + - OID: 1.3.6.1.4.1.2620.1.6.7.8.3.1.3
35 + name: voltageSensorValue
36 + chart_meta:
37 + description: "Voltage sensor reading"
38 + family: 'Hardware/Sensor/Voltage/Value'
39 + unit: "V"
40 + - OID: 1.3.6.1.4.1.2620.1.6.7.8.3.1.6
41 + name: voltageSensorStatus
42 + chart_meta:
43 + description: "Voltage sensor out-of-range status"
44 + family: 'Hardware/Sensor/Voltage/Status'
45 + unit: "{status}"
46 + mapping:
47 + 0: ok
48 + 1: out_of_range
49 + 2: reading_error
50 + metric_tags:
51 + - symbol:
52 + OID: 1.3.6.1.4.1.2620.1.6.7.8.3.1.1
53 + name: voltageSensorIndex
54 + tag: sensor_index
55 + - symbol:
56 + OID: 1.3.6.1.4.1.2620.1.6.7.8.3.1.2
57 + name: voltageSensorName
58 + tag: sensor_name
59 +
60 + # RAID volume table
61 + - MIB: CHECKPOINT-MIB
62 + table:
63 + OID: 1.3.6.1.4.1.2620.1.6.7.7.1
64 + name: raidVolumeTable
65 + symbols:
66 + - OID: 1.3.6.1.4.1.2620.1.6.7.7.1.1.6
67 + name: raidVolumeState
68 + chart_meta:
69 + description: "RAID volume operational state"
70 + family: 'Hardware/RAID/Volume/State'
71 + unit: "{status}"
72 + mapping:
73 + 0: optimal
74 + 1: degraded
75 + 2: failed
76 + - OID: 1.3.6.1.4.1.2620.1.6.7.7.1.1.4
77 + name: numOfDisksOnRaid
78 + metric_type: gauge
79 + chart_meta:
80 + description: "Number of physical disks in RAID volume"
81 + family: 'Hardware/RAID/Volume/Disks'
82 + unit: "{disk}"
83 + - OID: 1.3.6.1.4.1.2620.1.6.7.7.1.1.8
84 + name: raidVolumeSize
85 + metric_type: gauge
86 + chart_meta:
87 + description: "RAID volume size"
88 + family: 'Hardware/RAID/Volume/Size'
89 + unit: "GBy"
90 + metric_tags:
91 + - symbol:
92 + OID: 1.3.6.1.4.1.2620.1.6.7.7.1.1.1
93 + name: raidVolumeIndex
94 + tag: raid_volume_index
95 + - symbol:
96 + OID: 1.3.6.1.4.1.2620.1.6.7.7.1.1.3
97 + name: raidVolumeType
98 + tag: _raid_volume_type
99 + mapping:
100 + 0: "raid-0"
101 + 1: "raid-1e"
102 + 2: "raid-1"
103 + 3: "raid-10"
104 + 4: "raid-4"
105 + 5: "raid-5"
106 + 6: "raid-6"
107 + 7: "raid-60"
108 + 8: "raid-50"
109 +
110 + # RAID disk table
111 + - MIB: CHECKPOINT-MIB
112 + table:
113 + OID: 1.3.6.1.4.1.2620.1.6.7.7.2
114 + name: raidDiskTable
115 + symbols:
116 + - OID: 1.3.6.1.4.1.2620.1.6.7.7.2.1.9
117 + name: raidDiskState
118 + chart_meta:
119 + description: "RAID physical disk state"
120 + family: 'Hardware/RAID/Disk/State'
121 + unit: "{status}"
122 + mapping:
123 + 0: online
124 + 1: missing
125 + 2: not_compatible
126 + 3: disc_failed
127 + 4: initializing
128 + 5: offline_requested
129 + 6: failed_requested
130 + 7: unconfigured_good_spun_up
131 + 8: unconfigured_good_spun_down
132 + 9: unconfigured_bad
133 + 10: hotspare
134 + 11: drive_offline
135 + 12: rebuild
136 + 13: failed
137 + 14: copyback
138 + 255: other_offline
139 + - OID: 1.3.6.1.4.1.2620.1.6.7.7.2.1.11
140 + name: raidDiskSyncState
141 + metric_type: gauge
142 + chart_meta:
143 + description: "RAID disk synchronization progress"
144 + family: 'Hardware/RAID/Disk/SyncProgress'
145 + unit: "%"
146 + - OID: 1.3.6.1.4.1.2620.1.6.7.7.2.1.12
147 + name: raidDiskSize
148 + metric_type: gauge
149 + chart_meta:
150 + description: "RAID physical disk size"
151 + family: 'Hardware/RAID/Disk/Size'
152 + unit: "GBy"
153 + metric_tags:
154 + - symbol:
155 + OID: 1.3.6.1.4.1.2620.1.6.7.7.2.1.1
156 + name: raidDiskIndex
157 + tag: raid_disk_index
158 + - symbol:
159 + OID: 1.3.6.1.4.1.2620.1.6.7.7.2.1.2
160 + name: raidDiskVolumeID
161 + tag: _raid_disk_volume_id
162 + - symbol:
163 + OID: 1.3.6.1.4.1.2620.1.6.7.7.2.1.6
164 + name: raidDiskProductID
165 + tag: _raid_disk_product
src/go/plugin/go.d/config/go.d/snmp.profiles/default/_checkpoint-vpn.yaml
+112 -9
@@ -16,7 +16,7 @@ metrics:
16 OID: 1.3.6.1.4.1.2620.1.2.9.2.1.0
17 name: cpvIKETotalFailuresInit
18 chart_meta:
19 - description: Total IKE negotiation failures as initiator
19 + description: IKE negotiation failures as initiator per second
20 family: 'Network/VPN/IPSec/IKE/Failure/Initiator'
21 unit: "{failure}/s"
22 - MIB: CHECKPOINT-MIB
@@ -24,7 +24,7 @@ metrics:
24 OID: 1.3.6.1.4.1.2620.1.2.9.2.3.0
25 name: cpvIKETotalFailuresResp
26 chart_meta:
27 - description: Total IKE negotiation failures as responder
27 + description: IKE negotiation failures as responder per second
28 family: 'Network/VPN/IPSec/IKE/Failure/Responder'
29 unit: "{failure}/s"
30
@@ -52,7 +52,7 @@ metrics:
52 OID: 1.3.6.1.4.1.2620.1.2.5.3.1.0
53 name: cpvSaDecrErr
54 chart_meta:
55 - description: Total SA decryption errors
55 + description: SA decryption errors per second
56 family: 'Network/VPN/IPSec/SA/Error/Decrypt'
57 unit: "{error}/s"
58 - MIB: CHECKPOINT-MIB
@@ -60,7 +60,7 @@ metrics:
60 OID: 1.3.6.1.4.1.2620.1.2.5.3.2.0
61 name: cpvSaAuthErr
62 chart_meta:
63 - description: Total SA authentication errors
63 + description: SA authentication errors per second
64 family: 'Network/VPN/IPSec/SA/Error/Auth'
65 unit: "{error}/s"
66 - MIB: CHECKPOINT-MIB
@@ -68,7 +68,7 @@ metrics:
68 OID: 1.3.6.1.4.1.2620.1.2.5.3.3.0
69 name: cpvSaReplayErr
70 chart_meta:
71 - description: Total SA replay errors
71 + description: SA replay errors per second
72 family: 'Network/VPN/IPSec/SA/Error/Replay'
73 unit: "{error}/s"
74
@@ -78,7 +78,7 @@ metrics:
78 OID: 1.3.6.1.4.1.2620.1.2.5.4.5.0
79 name: cpvIpsecEspEncPkts
80 chart_meta:
81 - description: Total ESP encrypted packets
81 + description: ESP encrypted packets per second
82 family: 'Network/VPN/IPSec/Traffic/Packet/Out'
83 unit: "{packet}/s"
84 - MIB: CHECKPOINT-MIB
@@ -86,7 +86,7 @@ metrics:
86 OID: 1.3.6.1.4.1.2620.1.2.5.4.6.0
87 name: cpvIpsecEspDecPkts
88 chart_meta:
89 - description: Total ESP decrypted packets
89 + description: ESP decrypted packets per second
90 family: 'Network/VPN/IPSec/Traffic/Packet/In'
91 unit: "{packet}/s"
92 - MIB: CHECKPOINT-MIB
@@ -94,7 +94,7 @@ metrics:
94 OID: 1.3.6.1.4.1.2620.1.2.5.4.19.0
95 name: cpvIpsecEspEncBytes
96 chart_meta:
97 - description: Total ESP encrypted bytes
97 + description: ESP encrypted bytes per second
98 family: 'Network/VPN/IPSec/Traffic/Throughput/Out'
99 unit: "By/s"
100 - MIB: CHECKPOINT-MIB
@@ -102,7 +102,7 @@ metrics:
102 OID: 1.3.6.1.4.1.2620.1.2.5.4.20.0
103 name: cpvIpsecEspDecBytes
104 chart_meta:
105 - description: Total ESP decrypted bytes
105 + description: ESP decrypted bytes per second
106 family: 'Network/VPN/IPSec/Traffic/Throughput/In'
107 unit: "By/s"
108
@@ -227,3 +227,106 @@ metrics:
227 symbol:
228 OID: 1.3.6.1.4.1.2620.500.9003.1.11
229 name: permanentTunnelType
230 +
231 + # Extended IKE scalars — complement the 3 IKE metrics above
232 + - MIB: CHECKPOINT-MIB
233 + symbol:
234 + OID: 1.3.6.1.4.1.2620.1.2.9.1.2.0
235 + name: cpvIKECurrInitSAs
236 + chart_meta:
237 + description: Current IKE Security Associations initiated by this gateway
238 + family: 'Network/VPN/IPSec/IKE/SA/Active/Initiator'
239 + unit: "{sa}"
240 + - MIB: CHECKPOINT-MIB
241 + symbol:
242 + OID: 1.3.6.1.4.1.2620.1.2.9.1.3.0
243 + name: cpvIKECurrRespSAs
244 + chart_meta:
245 + description: Current IKE Security Associations responded to by this gateway
246 + family: 'Network/VPN/IPSec/IKE/SA/Active/Responder'
247 + unit: "{sa}"
248 + - MIB: CHECKPOINT-MIB
249 + symbol:
250 + OID: 1.3.6.1.4.1.2620.1.2.9.1.4.0
251 + name: cpvIKETotalSAs
252 + chart_meta:
253 + description: IKE Security Associations created per second
254 + family: 'Network/VPN/IPSec/IKE/SA/Total'
255 + unit: "{sa}/s"
256 + - MIB: CHECKPOINT-MIB
257 + symbol:
258 + OID: 1.3.6.1.4.1.2620.1.2.9.1.7.0
259 + name: cpvIKETotalSAsAttempts
260 + chart_meta:
261 + description: IKE SA negotiation attempts per second
262 + family: 'Network/VPN/IPSec/IKE/SA/Attempts'
263 + unit: "{attempt}/s"
264 + - MIB: CHECKPOINT-MIB
265 + metric_type: gauge
266 + symbol:
267 + OID: 1.3.6.1.4.1.2620.1.2.9.1.10.0
268 + name: cpvIKEMaxConncurSAs
269 + chart_meta:
270 + description: Peak concurrent IKE Security Associations
271 + family: 'Network/VPN/IPSec/IKE/SA/Peak'
272 + unit: "{sa}"
273 + - MIB: CHECKPOINT-MIB
274 + symbol:
275 + OID: 1.3.6.1.4.1.2620.1.2.9.2.2.0
276 + name: cpvIKENoResp
277 + chart_meta:
278 + description: IKE failures per second due to no response from peer
279 + family: 'Network/VPN/IPSec/IKE/Failure/NoResponse'
280 + unit: "{failure}/s"
281 +
282 + # Extended IPSec SA error scalars — complement decrypt/auth/replay
283 + - MIB: CHECKPOINT-MIB
284 + symbol:
285 + OID: 1.3.6.1.4.1.2620.1.2.5.3.4.0
286 + name: cpvSaPolicyErr
287 + chart_meta:
288 + description: IPSec SA policy errors per second
289 + family: 'Network/VPN/IPSec/SA/Error/Policy'
290 + unit: "{error}/s"
291 + - MIB: CHECKPOINT-MIB
292 + symbol:
293 + OID: 1.3.6.1.4.1.2620.1.2.5.3.5.0
294 + name: cpvSaOtherErrIn
295 + chart_meta:
296 + description: IPSec SA other inbound errors per second
297 + family: 'Network/VPN/IPSec/SA/Error/Other/In'
298 + unit: "{error}/s"
299 + - MIB: CHECKPOINT-MIB
300 + symbol:
301 + OID: 1.3.6.1.4.1.2620.1.2.5.3.6.0
302 + name: cpvSaOtherErrOut
303 + chart_meta:
304 + description: IPSec SA other outbound errors per second
305 + family: 'Network/VPN/IPSec/SA/Error/Other/Out'
306 + unit: "{error}/s"
307 + - MIB: CHECKPOINT-MIB
308 + symbol:
309 + OID: 1.3.6.1.4.1.2620.1.2.5.3.7.0
310 + name: cpvSaUnknownSpiErr
311 + chart_meta:
312 + description: IPSec SA unknown SPI errors per second
313 + family: 'Network/VPN/IPSec/SA/Error/UnknownSPI'
314 + unit: "{error}/s"
315 +
316 + # NAT-Traversal (UDP-encapsulated ESP) packet counters
317 + - MIB: CHECKPOINT-MIB
318 + symbol:
319 + OID: 1.3.6.1.4.1.2620.1.2.5.4.1.0
320 + name: cpvIpsecUdpEspEncPkts
321 + chart_meta:
322 + description: NAT-T UDP-encapsulated ESP encrypted packets per second
323 + family: 'Network/VPN/IPSec/Traffic/Packet/NatT/Out'
324 + unit: "{packet}/s"
325 + - MIB: CHECKPOINT-MIB
326 + symbol:
327 + OID: 1.3.6.1.4.1.2620.1.2.5.4.2.0
328 + name: cpvIpsecUdpEspDecPkts
329 + chart_meta:
330 + description: NAT-T UDP-encapsulated ESP decrypted packets per second
331 + family: 'Network/VPN/IPSec/Traffic/Packet/NatT/In'
332 + unit: "{packet}/s"
src/go/plugin/go.d/config/go.d/snmp.profiles/default/_checkpoint-vsx.yaml new
+166
@@ -0,0 +1,166 @@
1 +# Check Point VSX (Virtual Systems) monitoring (CHECKPOINT-MIB)
2 +# Per-virtual-system status, CPU usage, and traffic/connection counters.
3 +# Tables are empty on non-VSX gateways — no harm in polling.
4 +
5 +metrics:
6 + # VSX capacity scalars
7 + - MIB: CHECKPOINT-MIB
8 + metric_type: gauge
9 + symbol:
10 + OID: 1.3.6.1.4.1.2620.1.16.11.0
11 + name: vsxVsSupported
12 + chart_meta:
13 + description: "Maximum number of virtual systems supported"
14 + family: 'Security/VSX/Capacity/Supported'
15 + unit: "{vs}"
16 + - MIB: CHECKPOINT-MIB
17 + metric_type: gauge
18 + symbol:
19 + OID: 1.3.6.1.4.1.2620.1.16.12.0
20 + name: vsxVsConfigured
21 + chart_meta:
22 + description: "Number of virtual systems configured"
23 + family: 'Security/VSX/Capacity/Configured'
24 + unit: "{vs}"
25 + - MIB: CHECKPOINT-MIB
26 + metric_type: gauge
27 + symbol:
28 + OID: 1.3.6.1.4.1.2620.1.16.13.0
29 + name: vsxVsInstalled
30 + chart_meta:
31 + description: "Number of virtual systems installed"
32 + family: 'Security/VSX/Capacity/Installed'
33 + unit: "{vs}"
34 +
35 + # Per-VS status table — per-virtual-system resource weight and metadata
36 + - MIB: CHECKPOINT-MIB
37 + table:
38 + OID: 1.3.6.1.4.1.2620.1.16.22.1
39 + name: vsxStatusTable
40 + symbols:
41 + - OID: 1.3.6.1.4.1.2620.1.16.22.1.1.10
42 + name: vsxStatusVSWeight
43 + metric_type: gauge
44 + chart_meta:
45 + description: "Virtual system resource control weight"
46 + family: 'Security/VSX/VS/ResourceWeight'
47 + unit: "{weight}"
48 + metric_tags:
49 + - symbol:
50 + OID: 1.3.6.1.4.1.2620.1.16.22.1.1.1
51 + name: vsxStatusVSId
52 + tag: vs_id
53 + - symbol:
54 + OID: 1.3.6.1.4.1.2620.1.16.22.1.1.3
55 + name: vsxStatusVsName
56 + tag: vs_name
57 + - symbol:
58 + OID: 1.3.6.1.4.1.2620.1.16.22.1.1.4
59 + name: vsxStatusVsType
60 + tag: _vs_type
61 + - symbol:
62 + OID: 1.3.6.1.4.1.2620.1.16.22.1.1.5
63 + name: vsxStatusMainIP
64 + tag: _vs_main_ip
65 + - symbol:
66 + OID: 1.3.6.1.4.1.2620.1.16.22.1.1.7
67 + name: vsxStatusVsPolicyType
68 + tag: _vs_policy_type
69 + - symbol:
70 + OID: 1.3.6.1.4.1.2620.1.16.22.1.1.9
71 + name: vsxStatusHAState
72 + tag: _vs_ha_state
73 +
74 + # Per-VS CPU usage (1-minute average, most operationally useful window)
75 + - MIB: CHECKPOINT-MIB
76 + table:
77 + OID: 1.3.6.1.4.1.2620.1.16.22.2
78 + name: vsxStatusCPUUsageTable
79 + symbols:
80 + - OID: 1.3.6.1.4.1.2620.1.16.22.2.1.3
81 + name: vsxStatusCPUUsage1min
82 + metric_type: gauge
83 + chart_meta:
84 + description: "Virtual system CPU usage (1 minute average)"
85 + family: 'Security/VSX/VS/CPU/Usage'
86 + unit: "%"
87 + metric_tags:
88 + - symbol:
89 + OID: 1.3.6.1.4.1.2620.1.16.22.2.1.6
90 + name: vsxStatusCPUUsageVSId
91 + tag: vs_id
92 +
93 + # Per-VS connection counters
94 + - MIB: CHECKPOINT-MIB
95 + table:
96 + OID: 1.3.6.1.4.1.2620.1.16.23
97 + name: vsxCountersTable
98 + symbols:
99 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.2
100 + name: vsxCountersConnNum
101 + metric_type: gauge
102 + chart_meta:
103 + description: "Virtual system active connections"
104 + family: 'Security/VSX/VS/Connection/Active'
105 + unit: "{connection}"
106 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.3
107 + name: vsxCountersConnPeakNum
108 + metric_type: gauge
109 + chart_meta:
110 + description: "Virtual system peak connections"
111 + family: 'Security/VSX/VS/Connection/Peak'
112 + unit: "{connection}"
113 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.4
114 + name: vsxCountersConnTableLimit
115 + metric_type: gauge
116 + chart_meta:
117 + description: "Virtual system connection table limit"
118 + family: 'Security/VSX/VS/Connection/Limit'
119 + unit: "{connection}"
120 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.7
121 + name: vsxCountersAcceptedTotal
122 + chart_meta:
123 + description: "Virtual system accepted packets per second"
124 + family: 'Security/VSX/VS/Packet/Accepted'
125 + unit: "{packet}/s"
126 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.6
127 + name: vsxCountersDroppedTotal
128 + chart_meta:
129 + description: "Virtual system dropped packets per second"
130 + family: 'Security/VSX/VS/Packet/Dropped'
131 + unit: "{packet}/s"
132 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.8
133 + name: vsxCountersRejectedTotal
134 + chart_meta:
135 + description: "Virtual system rejected packets per second"
136 + family: 'Security/VSX/VS/Packet/Rejected'
137 + unit: "{packet}/s"
138 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.12
139 + name: vsxCountersLoggedTotal
140 + chart_meta:
141 + description: "Virtual system logged packets per second"
142 + family: 'Security/VSX/VS/Packet/Logged'
143 + unit: "{packet}/s"
144 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.9
145 + name: vsxCountersBytesAcceptedTotal
146 + chart_meta:
147 + description: "Virtual system accepted bytes per second"
148 + family: 'Security/VSX/VS/Traffic/Accepted'
149 + unit: "By/s"
150 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.10
151 + name: vsxCountersBytesDroppedTotal
152 + chart_meta:
153 + description: "Virtual system dropped bytes per second"
154 + family: 'Security/VSX/VS/Traffic/Dropped'
155 + unit: "By/s"
156 + - OID: 1.3.6.1.4.1.2620.1.16.23.1.1.11
157 + name: vsxCountersBytesRejectedTotal
158 + chart_meta:
159 + description: "Virtual system rejected bytes per second"
160 + family: 'Security/VSX/VS/Traffic/Rejected'
161 + unit: "By/s"
162 + metric_tags:
163 + - symbol:
164 + OID: 1.3.6.1.4.1.2620.1.16.23.1.1.1
165 + name: vsxCountersVSId
166 + tag: vs_id
src/go/plugin/go.d/config/go.d/snmp.profiles/default/checkpoint.yaml
+42 -1
@@ -12,6 +12,10 @@ extends:
12 - _std-udp-mib.yaml
13 - _std-ip-mib.yaml
14 - _checkpoint-vpn.yaml
15 + - _checkpoint-firewall-extra.yaml
16 + - _checkpoint-hardware.yaml
17 + - _checkpoint-cluster.yaml
18 + - _checkpoint-vsx.yaml
19
20 selector:
21 - sysobjectid:
@@ -307,4 +311,41 @@ metrics:
311 chart_meta:
312 description: "Peak number of connections"
313 family: 'System/Activity/Connection/Peak'
310 - unit: "{connection}/s"
314 + unit: "{connection}"
315 + # CPU global scalars (not per-core — complements multiProcTable)
316 + - MIB: CHECKPOINT-MIB
317 + metric_type: gauge
318 + symbol:
319 + OID: 1.3.6.1.4.1.2620.1.6.7.2.5.0
320 + name: procQueue
321 + chart_meta:
322 + description: "Processor run queue length"
323 + family: 'System/CPU/RunQueue'
324 + unit: "{process}"
325 + - MIB: CHECKPOINT-MIB
326 + symbol:
327 + OID: 1.3.6.1.4.1.2620.1.6.7.2.6.0
328 + name: procInterrupts
329 + chart_meta:
330 + description: "Processor interrupts per second"
331 + family: 'System/CPU/Interrupts'
332 + unit: "{interrupt}/s"
333 + # Remote Access VPN users
334 + - MIB: CHECKPOINT-MIB
335 + metric_type: gauge
336 + symbol:
337 + OID: 1.3.6.1.4.1.2620.1.9.5.0
338 + name: dtpsConnectedUsers
339 + chart_meta:
340 + description: "Currently connected remote access VPN users"
341 + family: 'Security/RemoteAccess/Users/Connected'
342 + unit: "{user}"
343 + - MIB: CHECKPOINT-MIB
344 + metric_type: gauge
345 + symbol:
346 + OID: 1.3.6.1.4.1.2620.1.9.4.0
347 + name: dtpsLicensedUsers
348 + chart_meta:
349 + description: "Licensed remote access VPN users"
350 + family: 'Security/RemoteAccess/Users/Licensed'
351 + unit: "{user}"