Network Management

Palo Alto firewall polling is not enabled or failed in NPM

If you see the Palo Alto firewall polling is not enabled or failed message, make sure you are polling the Palo Alto firewall node longer than the default polling interval. Ensure that REST API polling is enabled, you have correct credentials and no firewall is blocking traffic from the device to NPM.

First published date

5/15/2019 7:28 AM

Last published date

4/22/2025 3:25 PM

Overview

When the SolarWinds Platform Web Console displays the Palo Alto polling not enabled or failed message on a Site-to-Site VPN or Global Protect view for a Palo Alto firewall, verify the polling settings for the Palo Alto firewall node and make sure the SSL certificate on the node is valid.

Product section

Network Performance Monitor

Cause

The message is displayed in the following cases:
  • The Palo Alto node is monitored through SNMP only, Palo Alto REST API polling is not enabled.
  • You have just added the Palo Alto firewall polling node to NPM for monitoring. No data has been polled yet.
  • There are polling issues.
  • The SSL certificate for the node is invalid.

Resolution


Palo Alto node is monitored only via SNMP 

If you were monitoring the Palo Alto node through SNMP only, enable REST API polling.
  1. Go to the Summary subview for the Palo Alto firewall.
  2. Click Edit Node in the Management widget.
  3. Scroll down to Palo Alto Polling Settings, select Poll for Palo Alto, provide and test credentials.
  4. Submit the changes.


No data polled for the Palo Alto node 

If you have just added the Palo Alto firewall node to NPM and enabled REST API polling, wait a few minutes for the data to be polled and displayed.


Polling issues 

If you are monitoring the node longer than the period set as the status polling interval (by default, it is 10 minutes), verify the node status:
  • If the node is not up, NPM has problems reaching the node. Ensure that the device is working and that no firewall is blocking the traffic from the device to NPM.
  • If the node is up, SNMP or ICMP polling works but NPM cannot poll Palo Alto firewall data through the REST API.
    • Make sure that you have provided correct credentials for Palo Alto firewall. On the Node details page, click Edit Node, ensure that Poll for Palo Alto firewall is selected, and double-check the credentials. See account permissions in Requirements for Network Insight for Palo Alto.
    • Verify that no firewall is blocking the traffic for the Palo Alto firewall REST API data.
 

Invalid SSL certificate 

The reasons why the certificate is not verified successfully may include:
  • The certificate was signed by an authority that is not trusted
  • The certificate is expired.
  • The certificate is s a self-signed certificate.
  • The certificate uses weak encryption.
If the SSL certificate was not verified successfully, make sure that SSL certificate is valid, or accept the invalid certificate.
SolarWinds recommends that you only use valid SSL certificates because accepting invalid certificates can cause security issues.
To accept the invalid certificate:
  1. Go to the Summary subview for the Palo Alto firewall.
  2. Click Edit Node in the Management widget.
  3. Scroll down to Palo Alto Polling Settings and click Test Credentials.
  4. Review the information and click Accept Certificate.

NPM now polls details on the Palo Alto firewall.
Note - Removing the node and re-adding it with the IP Address has also resolved the Invalid Certificate issue in many cases.