Special agent for monitoring Palo Alto Networks firewalls through the PAN-OS XML API. Authentication works either with a fixed API key or with username and password, in which case the agent generates a key per run. Every topic can be enabled or disabled individually in the rule.

Monitored topics:

• Certificates: expiry of configured and device certificates
• IPSec tunnels: tunnel state and negotiated cipher
• IKE gateways: gateway state and negotiated cipher
• System: model, serial, PAN-OS version, content and threat versions, uptime
• Sessions: active sessions against the session limit, connections per second
• CPU: load of management and data planes
• Environment: temperature, fans, power supplies
• High availability: HA state, peer state and HA link status
• Interfaces: link state, speed, duplex, traffic, errors and discards
• BGP: peer session states
• OSPF: OSPFv2 and OSPFv3 neighbor states
• Licenses: installed licenses and their expiry