Zabbix Integration Guide

Deployment Overview

Zabbix is software that monitors IT infrastructure and the health and integrity of networks, servers, virtual machines, applications, services, databases, websites, the cloud, and more.

This document describes how to use Zabbix to remotely monitor a WatchGuard Firebox.

Test Topology

Configure Your Firebox

You must use Fireware Web UI to configure the SNMP settings on the WatchGuard Firebox before you use the Advanced Monitoring Agent to discover the Firebox. The URL to connect to Fireware Web UI in your web browser is https://<Firebox IP address>:8080.

Enable SNMP on the Firebox

To enable SNMP on the Firebox:

1. Open Fireware Web UI and log in to the Firebox.
2. Select System > SNMP.
   The SNMP Settings page opens.

3. From the Version drop-down list, select v3.
4. In the User Name text box, type your user name.
   
5. From the Authentication Protocol drop-down list, select MD5 or SHA1. In our example, we use MD5.
6. In the Password and Confirm text boxes, type the authentication password.
7. From the Privacy Protocol drop-down list, select DES.
8. In the Password and Confirm text boxes, type the privacy password.
9. Keep other settings as the default values.
   

Add an SNMP Policy

To enable the Firebox to receive SNMP polls from the Windows server, you must add an SNMP packet filter policy.

To add an SNMP policy:

1. Select Firewall > Firewall Policies.
2. Click Add Policy.

3. From the Packet Filter drop-down list, select SNMP.
4. Click Add Policy.

5. In the From section, select Any-Trusted or Any-Optional, depending on which port is connected to Zabbix.
6. In the To section, select Firebox.
7. Click Save.

Zabbix Configuration

Log in to the Zabbix Web UI.

Create a Host

To create a host:

1. Select Configuration > Hosts.

2. Click Create Host.

3. In the Host Name text box, type your host name.
4. In the Templates text box, select Network Generic Device SNMP. There is no official WatchGuard template.
5. In the Host Groups text box, select Discovered Hosts.
6. Below Interfaces, click Add. Select SNMP.
7. In the IP Address text box, type the IP address of the Firebox interface which is connected to Zabbix.
8. From the SNMP Version drop-down list, select SNMPv3.
9. In the Security Name text box, type the user name you specified in the Enable SNMP on the Firebox section.
10. From the Security Level drop-down list, select authPriv.
11. From the Authentication Protocol drop-down list, select MD5.
12. In the Authentication Passphrase text box, type the authentication password you specified in the SNMP settings on the Firebox.
13. From the Privacy Protocol drop-down list, select DES.
14. In the Privacy Passphrase text box, type the privacy password you specified in the SNMP settings on the Firebox.

15. Click Add.

Create an Item

The Network Generic Device SNMP template might not include all of the required information. You can add a custom item to get the Firebox version.

To create an item:

1. Click M400 Items.

2. Click Create Item.

3. In the Name text box, type the item name.
4. From the Type drop-down list, select SNMP Agent.
5. In the Key text box, type the key.
6. From the Type of Information drop-down list, select Character.
   The host IP address shows in the Host Interface drop-down list.
7. In the SNMP OID text box, type the WatchGuard firmware version OID 1.3.6.1.4.1.3097.6.3.1.0.
8. In the Update Interval text box, type 15m.
9. Keep other settings as the default values.
   
10. Click Add.

Test the Integration

To test the integration:

1. Wait for Zabbix to get the latest OID values, or to get the values manually, in Items, click Execute Now.

2. Select Monitoring > Hosts > M400.

3. Click Latest Data.
   The OID values show.