LM with CLoudgenic (Palo Alto Prisma SD-WAN) API support?

We are monitoring ion 9000's, but we didn't use netscan since we're just monitoring the devices using a local collector and had all the IP addresses.

9 hours ago, Stuart Weenig said:

We are monitoring ion 9000's, but we didn't use netscan since we're just monitoring the devices using a local collector and had all the IP addresses.

Hey Stuart,

Yeah, in our case we have an ION 2K at 268 retail installations where the controller port is DHCP so that we can easily crash cart the store if the manager moves a cable direct to the ISP Modem. So we need that as DHCP. Having LM be able to parse the portal to not only get ION information, but direct SWI status from the portal via our local collector was one of the reasons we chose LM over Solar Winds. But looks like it's currently busted with a few other customers in line with us, so yay, we are not alone! ?

It's a solvable problem. I wouldn't wait on LM to fix it though. Dig into the cloudgenix api to see if you can get the data.

1 hour ago, Stuart Weenig said:

It's a solvable problem. I wouldn't wait on LM to fix it though. Dig into the cloudgenix api to see if you can get the data.

In this case I do need LM to fix their integration. I have written quite a bit to the Cloudgenix API, used it to get all my controller interfaces to feed to the SNMP scanner, and discovered the issue where my controllers use DHCP so they tend to move around. This was why I needed the integration.

I'll update as LM Devs update me.

Thanks @Nick Ellsonand @Stuart Weenig.  For awareness, we've recently published this public support article and are actively developing against Palo Alto Networks' Unified SASE SD-WAN API.   Additionally, in release 177 we released updated Isilon LogicModules that explicitly exclude Cloudgenix ION OIDs from the AppliesTo logic, as previously the Isilon DataSources were getting applied to some CloudGenix ION devices and causing excessive Isilon DataSources Instances for CloudGenix devices.

https://www.logicmonitor.com/support/palo-alto-prisma-sd-wan-monitoring

If you would like to participate in the R&D of the next set of Palo Alto Prisma SD-WAN LogicModules, please feel free to reach out directly to me or to your Customer Success Manager, as this work is active and "aims" to conclude in December.

For those that might not want to click on URLs, attached is the current summary.  As we update Palo Alto Prisma SD-WAN and CloudGenix ION monitoring support we'll update this page. However, currently we provide monitoring support for the following ION Series:

• ION 1000 Series
• ION 2000 Series
• ION 3000 Series
• ION 5000 Series
• ION 7000 Series
• ION 9000 Series
• Virtual ION Series

You know I love me some R&D. Sign me up.

Sure, I'm in.

To add some context to what we have achieved with other integrations with Cloudgenix in the past:

The Topology API contains the necessary information at a site level to show all of the VPN Fabric connections and their status. When posting for a particular Site ID, you obtain a list of several "Types" of topology. For making Topology maps for use in mapping your SD-WAN, you look for the type "vpn". This will give you source and destination nodes to make pretty maps of the underlaying fabric from spokes to hubs, or spokes to spokes.

But for connectivity validation, using the status of the type: "internet-stub" you get a better idea of your ISP's validity at each location that goes beyond just Link Up/Down on any particular ION's interface. It is a direct representation of the SWI's ability to connect to the portal itself and is also used by Cloudgenix for use in making pathing decisions. This is what the Topo_App from ebob9 in github is doing to provide this data via synthetic web transactions so that basic monitoring tools like Thousand Eyes or Solarwinds can monitor this data.

Having LM do this directly via the portal API is a great advantage to us as it eliminates the middleware portion of our current monitoring. 

 

Hi, @Nick Ellsonand @Stuart Weenig.  I just sent you both instructions/requirements for configuring your sandbox portal for Prisma SD-WAN LogicModule R&D.  Please reply to the email I sent you with any questions you might have, or send me a meeting invitation if you'd like to have a discussion.

Thanks so much.

Yeah, sandbox portal doesn't have customer devices in it, so no dice for mine.