Monitoring Ethernet Interface Statistics using SNMP for PA-VM in Azure
22420
Created On 08/02/19 09:57 AM - Last Modified 03/18/20 01:18 AM
Symptom
- SNMPWalk to display interface statistics of PA-VM on Azure only displays the statistics for the management interface.
- The statistics for other interfaces are seen as 0 similar to the display below:
$ snmpwalk -c public -v2c A.B.C.D 1.3.6.1.2.1.31.1.1.1.6
(Note: A.B.C.D is firewall management IP address and 1.3.6.1.2.1.31.1.1.1.6 is OID for interface information.)
IF-MIB::ifHCInOctets.1 = Counter64: 0
IF-MIB::ifHCInOctets.2 = Counter64: 0
IF-MIB::ifHCInOctets.3 = Counter64: 18209008 <=========Management interface
IF-MIB::ifHCInOctets.4 = Counter64: 0
IF-MIB::ifHCInOctets.5 = Counter64: 0
IF-MIB::ifHCInOctets.6 = Counter64: 0
IF-MIB::ifHCInOctets.7 = Counter64: 0
IF-MIB::ifHCInOctets.8 = Counter64: 0
IF-MIB::ifHCInOctets.9 = Counter64: 0
IF-MIB::ifHCInOctets.10 = Counter64: 0
IF-MIB::ifHCInOctets.200000000 = Counter64: 0
IF-MIB::ifHCInOctets.300000000 = Counter64: 0
IF-MIB::ifHCInOctets.400000000 = Counter64: 0
Environment
- PAN-OS 7.1, 8.0 and 9.0.
- Palo Alto VM Firewall on Microsoft Azure.
Cause
The reason why the interface statistics display no value is due to the Linux Ethernet driver for Hyper-V used in PAN-OS 9.0 and below doesn't support device statistics like other platforms do.
Resolution
Upgrade the PAN-OS version to 9.1 or above.
PAN-OS version 9.1 uses the newer Linux Ethernet driver for Hyper-V (LIS driver version as 4.3.2) which has resolved this issue.
Additional Information
Other Non Supported features of Microsoft Virtual Machines can be found here.