zabbix_export: version: '6.0' date: '2021-11-21T21:17:43Z' groups: - uuid: 7df96b18c230490a9a0a9e2307226338 name: Templates templates: - uuid: d8d82f4afaf840a8836bbf89c2133c48 template: 'CheckPoint FW-1' name: 'CheckPoint FW-1' description: | ## Overview Use this template to monitor Checkpoint firewalls CPU, mem, HA status and FW-1 activity. **** The following value map must be created for the Checkpoint templates collection : "Checkpoint standard status" 0 ⇒ OK 1 ⇒ Warning 2 ⇒ Error The advsnmp.discovery external script (https://github.com/simonkowallik/Zabbix-Addons/tree/master/advsnmp.discovery) is also needed by most templates. Last, the SNMP items reference the CHECKPOINT-MIB (chkpnt.mib, see https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit\_doGoviewsolutiondetails=&solutionid=sk90470#Check Point SNMP MIB files for all products) so it must be properly installed on your Zabbix server. groups: - name: Templates items: - uuid: 62f130e1bfcc4898a393522796ce957a name: 'Firewall Policy Install Time' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::fwInstallTime.0' key: fwInstallTime delay: '900' trends: '0' value_type: TEXT tags: - tag: Application value: 'Checkpoint FW-1' triggers: - uuid: 9a766d793e234678b0669aa5994b8233 expression: '(last(/CheckPoint FW-1/fwInstallTime,#1)<>last(/CheckPoint FW-1/fwInstallTime,#2))=1' name: '{HOSTNAME} Policy installed' priority: INFO - uuid: c67866b26444476ea9c20e51abdd73d5 name: 'Firewall Module State' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::fwModuleState.0' key: fwModuleState delay: '900' trends: '0' value_type: TEXT tags: - tag: Application value: 'Checkpoint FW-1' - uuid: 1ab32eba14ab45f091d10e92f659fb5c name: 'Number of current connections' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::fwNumConn.0' key: fwNumConn delay: '120' tags: - tag: Application value: 'Checkpoint FW-1' - uuid: 8a43b87b2faf4b158b9f0ff5ce358c26 name: 'High Availability State' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::haState.0' key: haState delay: '900' trends: '0' value_type: TEXT tags: - tag: Application value: 'Checkpoint HA' triggers: - uuid: e030f4cba33f40cf846b4c6a23304838 expression: 'find(/CheckPoint FW-1/haState,,"like","active")=0 and find(/CheckPoint FW-1/haState,,"like","standby")=0' name: '{HOSTNAME} HA State not Active/Standby' priority: HIGH - uuid: 0f656cc690b64057976c4c95bc96fb6f name: 'High Availability Mode' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::haWorkMode.0' key: haWorkMode delay: '900' trends: '0' value_type: TEXT tags: - tag: Application value: 'Checkpoint HA' - uuid: c881844489a94e22995ea86e910ba5ba name: 'Memory Used' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::memActiveReal64.0' key: memActiveReal delay: '120' units: b tags: - tag: Application value: Memory - uuid: f6fcb809ba88419d8e332277fd1fadcb name: 'Memory Free' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::memFreeReal64.0' key: memFreeReal delay: '120' units: b tags: - tag: Application value: Memory - uuid: 9ae41695a83e477c90de275c1aaaaa2b name: 'Memory Total' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::memTotalReal64.0' key: memTotalReal delay: '120' units: b tags: - tag: Application value: Memory - uuid: aec236ef76ea428f9c34cdd9368615e2 name: 'Product Version' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::svnVersion.0' key: svnVersion delay: '3600' trends: '0' value_type: TEXT tags: - tag: Application value: 'Checkpoint FW-1' discovery_rules: - uuid: 82bc539fcf6b4f49b604d9ca5759196d name: 'HA Status' type: EXTERNAL key: 'advsnmp.discovery[{HOSTNAME},"-v2c -c{$SNMP_COMMUNITY}",1.3.6.1.4.1.2620.1.5.13.1.2,1.3]' delay: '240' item_prototypes: - uuid: fac46dec235e497c952d9112aa6b59cc name: 'HA Problem Status {#ADVSNMPVALUE}' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::haProblemStatus.{#ADVSNMPINDEX2}' key: 'haProblemStatus[{#ADVSNMPVALUE}]' delay: '120' trends: '0' value_type: TEXT tags: - tag: Application value: 'Checkpoint HA' trigger_prototypes: - uuid: 34c1f2d0cf3946aaac038a353c13e050 expression: 'find(/CheckPoint FW-1/haProblemStatus[{#ADVSNMPVALUE}],,"like","OK")=0' name: 'HA Status [{#ADVSNMPVALUE}]' priority: AVERAGE - uuid: a19933d726384ae2b2935d4d737256fc name: 'Processor Discovery' type: EXTERNAL key: 'advsnmp.discovery[{HOSTNAME},"-v2c -c{$SNMP_COMMUNITY}",1.3.6.1.4.1.2620.1.6.7.5.1.1,1.3]' delay: '240' item_prototypes: - uuid: 3ee48fed84724559bb9de7bfac5e6240 name: 'Processor {#ADVSNMPVALUE} Idle Time' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::multiProcIdleTime.{#ADVSNMPINDEX2}' key: 'multiProcIdleTime[{#ADVSNMPVALUE}]' delay: '90' tags: - tag: Application value: CPU trigger_prototypes: - uuid: 273f5333100b4a1ba32163726aee22e0 expression: 'avg(/CheckPoint FW-1/multiProcIdleTime[{#ADVSNMPVALUE}],300s)<25' name: '{HOSTNAME} Processor usage high on CPU {#ADVSNMPVALUE}' priority: AVERAGE - uuid: b2042b753ba14fd5bd6a69a7da760412 name: 'Processor {#ADVSNMPVALUE} System Time' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::multiProcSystemTime.{#ADVSNMPINDEX2}' key: 'multiProcSystemTime[{#ADVSNMPVALUE}]' delay: '90' tags: - tag: Application value: CPU - uuid: 32f3201fdd264562b86c83a3651e32b8 name: 'Processor {#ADVSNMPVALUE} User Time' type: SNMP_AGENT snmp_oid: 'CHECKPOINT-MIB::multiProcUserTime.{#ADVSNMPINDEX2}' key: 'multiProcUserTime[{#ADVSNMPVALUE}]' delay: '90' tags: - tag: Application value: CPU graph_prototypes: - uuid: cadc4190ab5345bbb6a1a37b82ddc79e name: 'Processor usage CPU {#ADVSNMPVALUE}' show_triggers: 'NO' type: STACKED graph_items: - drawtype: FILLED_REGION color: CC0000 item: host: 'CheckPoint FW-1' key: 'multiProcSystemTime[{#ADVSNMPVALUE}]' - sortorder: '1' drawtype: FILLED_REGION color: 0000C8 item: host: 'CheckPoint FW-1' key: 'multiProcUserTime[{#ADVSNMPVALUE}]' - sortorder: '2' drawtype: FILLED_REGION color: 00C800 item: host: 'CheckPoint FW-1' key: 'multiProcIdleTime[{#ADVSNMPVALUE}]' triggers: - uuid: 53c970d90b814e5cb8435e5422599c95 expression: '(last(/CheckPoint FW-1/haWorkMode,#1)<>last(/CheckPoint FW-1/haWorkMode,#2))=1 or (last(/CheckPoint FW-1/haState,#1)<>last(/CheckPoint FW-1/haState,#2))=1' name: '{HOSTNAME} HA State Change' priority: AVERAGE - uuid: dbf12506523c45f38031994d6aca1f08 expression: 'last(/CheckPoint FW-1/memActiveReal) / last(/CheckPoint FW-1/memTotalReal) > 0.8' name: '{HOSTNAME} Low memory' priority: HIGH graphs: - uuid: 7e63ed2d97db4a69b9556575d69efeef name: 'Memory Usage' type: STACKED graph_items: - color: 00EE00 item: host: 'CheckPoint FW-1' key: memFreeReal - sortorder: '1' color: CC0000 item: host: 'CheckPoint FW-1' key: memActiveReal - uuid: 4cb5fe37d6e14012848f8a16e2b46d14 name: 'Number of Connections' graph_items: - drawtype: GRADIENT_LINE color: 0000CC item: host: 'CheckPoint FW-1' key: fwNumConn