Metrics Library

This Metric can be used to track Sonicwall licensing, as well as alert on changes to licensing statuses. LicenseStatus.SecurityServices[].join( , [join( , [ , to_string(SecurityService)]), join( , [ : , to_string(SecurityStatus)])])

This Metric can be used to track Sonicwall licensing, as well as alert on changes to licensing statues. LicenseStatus.SupportServices[].join( , [join( , [ , to_string(SupportService)]), join( , [ : , to_string(Status)])])

Detects WAN Zone enabled SNMP interfaces with ANY as the source IP TSRAccessRules[].rules[?contains(Parent, WAN -> WAN ) && contains(Name, Deny ) == false && contains(Ip, Any -> ) && contains(Name, SNMP )].Ip []

This Metric can be used to track licensing in a Sonicwall, as well as alert on changes to Sonicwall licensing status. LicenseStatus.SecuritySuite[].join( , [join( , [ , to_string(SecurityService)]), join( , [ : , to_string(SecurityStatus)])])

This metric shows the management interface status of an enabled SSL Vpn server in Sonicwall SslVpn.SslVpnServer.Access

Checks whether the WAN -> WAN rule for HTTPS Management is restricted to a source other than "any"; true or false. For "Latest"TSRAccessRules[? name == WAN -> WAN ].rules[]|[? contains(Name, Allow ) && contains(Ip, Any -> ) && contains(Name, HTTPS Management )] == [] For 7.0Firewall.AccessRulesIPv4[? contains(From, WAN ) && contains(To, WAN ) && Action == allow && ServiceName == HTTPS Management && SourceAddressAny] == []

Detects WAN Zone enabled SSH Management interfaces with ANY as the source IP TSRAccessRules[].rules[?contains(Parent, WAN -> WAN ) && contains(Name, Deny ) == false && contains(Ip, Any -> ) && contains(Name, SSH Management )].Ip[]

This metric works for Gen 7 firewalls and returns a list of all active licenses that are going to expire in the next 90 days. Licenses[?Expiration && SecurityStatus== Licensed && ((time_until(Expiration, days ))<= 90 )].['Service Name: ' SecurityService, 'Days Untill Expiration:' time_until(Expiration, days )]

List of Access Rules IPv4 for Sonic OS7 Firewall.AccessRulesIPv4[].join( , , [join( : , [ Action: , to_string(Action)]), join( : , [ Service: ,to_string(ServiceName)]), join( : , [ From: , to_string(From)]), join( : , [ To: , to_string(DestinationAddressGroup)])]) | sort (@)

List of IPv6 NAT Policies for Sonic OS 7 Firewall.NatPolicies.Ipv6[?Enable == true ][].[Name, Comment]