Fortinet black logo

Administration Guide

Configuring the SNMP agent

Copy Link
Copy Doc ID 4f5a6250-a945-11ec-9fd1-fa163e15d75b:119729
Download PDF

Configuring the SNMP agent

The SNMP agent sends SNMP traps that originate on the FortiSandbox system to an external monitoring SNMP manager defined in one of the FortiSandbox SNMP communities. Typically an SNMP manager is an application on a local computer that can read the SNMP traps and generate reports or graphs from them.

The SNMP manager can monitor the FortiSandbox system to determine if it is operating properly, or if there are any critical events occurring. The description, location, and contact information for this FortiSandbox system will be part of the information an SNMP manager will have. This information is useful if the SNMP manager is monitoring many devices, and it will enable faster responses when the FortiSandbox system requires attention.

To configure the SNMP agent:
  1. Go to System > SNMP to configure the SNMP agent.
  2. Configure the following settings:

    SNMP Agent

    Select to enable the FortiSandbox SNMP agent. When this is enabled, it sends FortiSandbox SNMP traps.

    Description

    Enter a description of this FortiSandbox system to help uniquely identify this unit.

    Location

    Enter the location of this FortiSandbox system to help find it in the event it requires attention.

    Contact

    Enter the contact information for the person in charge of this FortiSandbox system.

    SNMP v1/v2c

    Create new, edit, or delete SNMP v1 and v2c communities. You can select to enable or disable communities in the edit page. The following columns are displayed: Community Name, Queries, Traps, Enable.

    SNMP v3

    Create new, edit, or delete SNMP v3 entries. You can select to enable or disable queries in the edit page. The following columns are displayed: User Name, Security Level, Notification Host, Queries.

To create a new SNMP v1/v2c community:
  1. Go to System > SNMP.
  2. In the SNMP v1/v2c section of the screen select Create New from the toolbar.
  3. Configure the following settings:

    Enable

    Select to enable the SNMP community.

    Community Name

    Enter a name to identify the SNMP community.

    Hosts

    The list of hosts that can use the settings in this SNMP community to monitor the FortiSandbox system.

    IP/Netmask

    Enter the IP address and netmask of the SNMP hosts. Select the Add button to add additional hosts.

    Queries v1

    Enter the port number and select to enable. Enable queries for each SNMP version that the FortiSandbox system uses.

    Queries v2c

    Enter the port number and select to enable. Enable queries for each SNMP version that the FortiSandbox system uses.

    Traps v1

    Enter the local port number, remote port number, and select to enable. Enable traps for each SNMP version that the FortiSandbox system uses.

    Traps v2c

    Enter the local port number, remote port number, and select to enable. Enable traps for each SNMP version that the FortiSandbox system uses.

    SNMP Events

    Enable the events that will cause the FortiSandbox unit to send SNMP traps to the community.

    • CPU usage is high
    • Memory is low
    • Hard disk usage is high
    • RAID disk information
    • Average scan time
    • Topology map and health check status for cluster has changed
    • Interface is up or down
    • Power Supply failure (not available on FSA-500F model)
    • Malware is detected
    • License or contract is close to expiry
  4. Click OK to create the SNMP community.
To create a new SNMP v3 user:
  1. Go to System > SNMP.
  2. In the SNMP v3 section of the screen, select Create New from the toolbar.
  3. Configure the following settings:

    Username

    Enter the name of the SNMPv3 user.

    Security Level

    Select the security level of the user. Select one of the following:

    • None
    • Authentication only
    • Encryption and authentication

    Authentication

    Authentication is required when Security Level is either Authentication only or Encryption and authentication.

    Method

    Select the authentication method. Select either:

    • MD5 (Message Digest 5 algorithm)
    • SHA1 (Secure Hash algorithm)

    Password

    Enter the authentication password. The password must be a minimum of 8 characters.

    Encryption

    Encryption is required when Security Level is Encryption and authentication.

    Method

    Select the encryption method, either DES or AES.

    Key

    Enter the encryption key. The encryption key value must be a minimum of 8 characters.

    Notification Hosts (Traps)

    IP/Netmask

    Enter the IP address and netmask. Click the Add button to add additional hosts.

    Query

    Port

    Enter the port number. Select to Enable the query port.

    SNMP v3 Events

    Select the SNMP events that will be associated with that user.

    • CPU usage is high
    • Memory is low
    • Hard disk usage is high
    • RAID disk information
    • Average scan time
    • Topology map and health check status for cluster has changed
    • Interface is up or down
    • Power Supply failure (not available on FSA-500F model)
    • Malware is detected
    • License or contract is close to expiry
  4. Click OK to create the SNMP community.

Configuring the SNMP agent

The SNMP agent sends SNMP traps that originate on the FortiSandbox system to an external monitoring SNMP manager defined in one of the FortiSandbox SNMP communities. Typically an SNMP manager is an application on a local computer that can read the SNMP traps and generate reports or graphs from them.

The SNMP manager can monitor the FortiSandbox system to determine if it is operating properly, or if there are any critical events occurring. The description, location, and contact information for this FortiSandbox system will be part of the information an SNMP manager will have. This information is useful if the SNMP manager is monitoring many devices, and it will enable faster responses when the FortiSandbox system requires attention.

To configure the SNMP agent:
  1. Go to System > SNMP to configure the SNMP agent.
  2. Configure the following settings:

    SNMP Agent

    Select to enable the FortiSandbox SNMP agent. When this is enabled, it sends FortiSandbox SNMP traps.

    Description

    Enter a description of this FortiSandbox system to help uniquely identify this unit.

    Location

    Enter the location of this FortiSandbox system to help find it in the event it requires attention.

    Contact

    Enter the contact information for the person in charge of this FortiSandbox system.

    SNMP v1/v2c

    Create new, edit, or delete SNMP v1 and v2c communities. You can select to enable or disable communities in the edit page. The following columns are displayed: Community Name, Queries, Traps, Enable.

    SNMP v3

    Create new, edit, or delete SNMP v3 entries. You can select to enable or disable queries in the edit page. The following columns are displayed: User Name, Security Level, Notification Host, Queries.

To create a new SNMP v1/v2c community:
  1. Go to System > SNMP.
  2. In the SNMP v1/v2c section of the screen select Create New from the toolbar.
  3. Configure the following settings:

    Enable

    Select to enable the SNMP community.

    Community Name

    Enter a name to identify the SNMP community.

    Hosts

    The list of hosts that can use the settings in this SNMP community to monitor the FortiSandbox system.

    IP/Netmask

    Enter the IP address and netmask of the SNMP hosts. Select the Add button to add additional hosts.

    Queries v1

    Enter the port number and select to enable. Enable queries for each SNMP version that the FortiSandbox system uses.

    Queries v2c

    Enter the port number and select to enable. Enable queries for each SNMP version that the FortiSandbox system uses.

    Traps v1

    Enter the local port number, remote port number, and select to enable. Enable traps for each SNMP version that the FortiSandbox system uses.

    Traps v2c

    Enter the local port number, remote port number, and select to enable. Enable traps for each SNMP version that the FortiSandbox system uses.

    SNMP Events

    Enable the events that will cause the FortiSandbox unit to send SNMP traps to the community.

    • CPU usage is high
    • Memory is low
    • Hard disk usage is high
    • RAID disk information
    • Average scan time
    • Topology map and health check status for cluster has changed
    • Interface is up or down
    • Power Supply failure (not available on FSA-500F model)
    • Malware is detected
    • License or contract is close to expiry
  4. Click OK to create the SNMP community.
To create a new SNMP v3 user:
  1. Go to System > SNMP.
  2. In the SNMP v3 section of the screen, select Create New from the toolbar.
  3. Configure the following settings:

    Username

    Enter the name of the SNMPv3 user.

    Security Level

    Select the security level of the user. Select one of the following:

    • None
    • Authentication only
    • Encryption and authentication

    Authentication

    Authentication is required when Security Level is either Authentication only or Encryption and authentication.

    Method

    Select the authentication method. Select either:

    • MD5 (Message Digest 5 algorithm)
    • SHA1 (Secure Hash algorithm)

    Password

    Enter the authentication password. The password must be a minimum of 8 characters.

    Encryption

    Encryption is required when Security Level is Encryption and authentication.

    Method

    Select the encryption method, either DES or AES.

    Key

    Enter the encryption key. The encryption key value must be a minimum of 8 characters.

    Notification Hosts (Traps)

    IP/Netmask

    Enter the IP address and netmask. Click the Add button to add additional hosts.

    Query

    Port

    Enter the port number. Select to Enable the query port.

    SNMP v3 Events

    Select the SNMP events that will be associated with that user.

    • CPU usage is high
    • Memory is low
    • Hard disk usage is high
    • RAID disk information
    • Average scan time
    • Topology map and health check status for cluster has changed
    • Interface is up or down
    • Power Supply failure (not available on FSA-500F model)
    • Malware is detected
    • License or contract is close to expiry
  4. Click OK to create the SNMP community.