Palo Alto Base Pack PowerPack Release Notes, version 103

Version 103 of the Palo Alto Base Pack PowerPack was updated for Python 3.6 compatibility, added new device classes, and added SSL support for REST API.

  • Minimum Required SL1 Version: 11.3.0

This PowerPack currently supports only basic authentication for discovery; it does not support the use of an API key.

Before You Install or Upgrade

Ensure that you are running version 11.3.0 or later of SL1 before installing "Palo Alto Base Pack" PowerPack version 103.

For details on upgrading SL1, see the relevant SL1 Platform Release Notes.

ScienceLogic suggests installing the Host Resource Core Pack PowerPack, Entity MIB PowerPack, and ScienceLogic Support Pack PowerPacks. The Dynamic Applications included in these PowerPacks will automatically align to your Palo Alto devices.

Installation Process

If you are currently using the Dynamic Applications in this PowerPack to monitor devices, collection errors might occur for one or two polling cycles during the installation of a new version. To prevent collection errors during an upgrade, you can optionally disable collection for monitored devices before performing the following steps and re-enable collection after the upgrade.

To install this PowerPack:

  1. Search for and download the PowerPack from the PowerPacks page (Product Downloads > PowerPacks & SyncPacks) at the ScienceLogic Support Site.
  2. In SL1, go to the PowerPacks page (System > Manage > PowerPacks).
  3. Click the Actions menu and choose Import PowerPack. The Import PowerPack modal appears.
  4. Click Browse and navigate to the PowerPack file from step 1.
  5. Select the PowerPack file and click Import. The PowerPack Installer modal displays a list of the PowerPack contents.
  6. Click Install. The PowerPack is added to the PowerPack Manager page.

For more information about using the PowerPack, see the Monitoring Palo Alto Base Pack manual.

Included Features

This release includes the following features:

  • Dynamic Applications that discover and collect configuration and performance data about Palo Alto firewalls.
  • Device Classes for each of the Palo Alto devices monitored.
  • Event Policies and corresponding alerts that are triggered when Palo Alto devices meet certain status criteria.
  • Example credentials to support REST API and SSL configurations for the Basic/Snippet credential and the SOAP/XML credential.

Enhancements and Issues Addressed

The following enhancements and addressed issues are included this release of the "Palo Alto Base Pack":

  • Added SSL support on REST API requests and added three example credentials for REST API.
  • Added the ION 9200 device class to the PowerPack.
  • Added the PA-440 device class to the PowerPack.
  • Updated the PowerPack to to be compatible with Python 3.6; updated the Execution Environment to "Palo Alto Base Pack EE py3.6 (python 3)"; and updated the silo_palo_alto to Python 3.6.

Known Issues

The following known issues affect version 103 of the Palo Alto Base Pack PowerPack:

  • If a device does not have the "top-application-categories" report returned by an API pull, then API based Dynamic Applications may not automatically align.
  • When running the "Palo Alto: License Configuration" Dynamic Application performance report, Palo Alto licenses that do not have an Auth Code will be skipped and an info message will be displayed. Collection will run as expected.
  • If a device does not support RPM readings, it's RPM default value in the "Palo Alto: Environmental Performance" Dynamic Application performance report is 'True'. If the RPM value is 'False', an event will be triggered.
  • The data unit for all metrics will not be displayed on the "Palo Alto: DOS, Drops, and TCP Stats" Dynamic Application performance report. The metrics are counters and there is no standard data unit available for this metric.
  • Some collection objects in this PowerPack support a limited format. Palo Alto software is subject to change without notice to ScienceLogic. Due to this, the format of collected data may change.