Acme Manufacturing — Monitoring — acme-fw01

Push a configuration template, then verify the push and that the running config matches the template.

Acme Manufacturing Matt L.
CSRv Provisioning NAT Configuration NetBrain Reconciliation Import to Orion Basic Device Monitoring Configuration APM Application
← Back to Basic Monitoring

Credentials — BitWarden

Each field below is the BitWarden vault URL for that credential.

The SNMP credentials used to monitor this device. If not specified, the project-level credentials are used

The credentials used for NCM Backups of this device, as well as primary for basic device monitoring configuration

The credentials used for NOC administration of this device. Link is provided in Insight. Alternate credential for basic device monitoring configuration

Configuration Push

Push Job IDNCM-8841
StatusSucceeded
Started2026-07-17 09:05
Completed2026-07-17 09:07
Executed ByMatt L.
ResultConfig applied; running config written to NVRAM.

Verification & Compliance

Configuration Matches Template Yes
Drift Detected No
Last Verified2026-07-17 09:12
Section compliance (running config vs template)
SNMP PollingMatch
SNMP TrapsMatch
SyslogMatch
NTPMatch
Running vs StartupIn sync

Configuration Preview

Rendered from “Palo Alto Firewall”

Monitoring configuration to be pushed to acme-fw01 (10.12.4.10). Secrets resolve from the linked vault entries at push time.

! ===== SNMP polling (SNMPv3) =====
snmp-server view NOC-VIEW iso included
snmp-server group NOC-RO v3 priv read NOC-VIEW
snmp-server user noc-monitor NOC-RO v3 auth sha-256 **** priv aes 256 ****
snmp-server source-interface informs Loopback0
snmp-server location acme-fw01
snmp-server contact noc@sentinel.com

! ===== SNMP traps / informs =====
snmp-server enable traps snmp linkdown linkup coldstart warmstart
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps cpu threshold
snmp-server host 10.100.0.10 version 3 priv noc-monitor

! ===== Syslog =====
logging source-interface Loopback0
logging host 10.100.0.20
logging trap informational
logging buffered 64000 informational
service timestamps log datetime msec localtime show-timezone

! ===== NTP (time sync for accurate logs / traps) =====
ntp source Loopback0
ntp server 10.100.0.30 prefer

! ===== AAA / TACACS+ (NOC administration) =====
aaa new-model
tacacs server NOC-TACACS
 address ipv4 10.100.0.40
aaa authentication login default group tacacs+ local

! ===== Config archive (enables rollback / drift compare) =====
archive
 path flash:/archive/acme-fw01-config
 write-memory