Kaseya® is an RMM (Remote Monitoring and Management) tool used commonly among MSPs (Management Service Providers). RMM agents are installed on MSP customer endpoints to discover IT assets and remotely monitor and manage them.
This document describes how to use Kaseya to discover and monitor a WatchGuard Firebox.
Platform and Software
The hardware and software used to complete the steps outlined in this document include:
- Firebox or WatchGuard XTM device installed with Fireware v11.10.x, with Interface 1 enabled as a trusted interface with the IP address 10.138.111.83 (you can also use an Optional interface)
- Kaseya version VSA R9.2 (web login)
- Probe IP address 10.138.111.2 installed on Windows Server 2012 Standard Edition
Test Topology and Workflow
This diagram shows the test topology used in this integration:
Set Up the Firebox
You must configure the SNMP settings on the WatchGuard Firebox before you use Kaseya to discover it.
- Log in to Fireware Web UI (https://<your firebox IP address>:8080).
- Select System > SNMP.
- From the Version drop-down list, select v3.
- From the Authentication Protocol drop-down list, select SHA1.
- In the Password and Confirm text boxes, type the authentication password.
- From the Privacy Protocol drop-down list, select DES.
- In the Password and Confirm text boxes, type the encryption password.
- In the User Name text box, type WatchGuard.
- Click Save.
- Select Firewall > Firewall Policies.
- Add an SNMP packet filter policy for traffic from Any-Trusted to Firebox.
If you connect to an optional interface, specifyAny-Optional instead of Any-Trusted.
Set Up Kaseya
- Log in to Kaseya.
- Download and install the Kaseya Agent on a probe computer. This computer must be in a LAN that connects to the WatchGuard Firebox.
- Go to the Discovery page.
- Probe the computer shown in Networks > By Agent.
- Select Discovery > Networks > By Networks.
- Click New to add a new network.
- Select the SNMP tab.
- Select the Enable SNMP check box.
- Leave the Community String text box empty.
- Click Save.
- In the dialog window that opens, type the gateway name.
- Select Network Monitor > Monitoring > View > group (KNM)
- Click Edit.
- Select the Authentication tab.
- For SNMP version, select SNMP v3.
- Configure the same SNMP authentication method, encryption method, and credentials that you configured on the Firebox.
- Select Discovery > Networks > By Networks > Scan Now to start the scan. Click while the network scan is in progress to check the process.
- Select Discovery > Networks > Discovered Devices to see discovered devices. In this example, two Fireboxes were discovered because two Fireboxes on this LAN are configured with SNMP enabled.
- Select the Firebox. Click Make Asset.
- Select Network Monitor > Monitoring > View > Gateway (WG).
- Select Install gateway.
When the gateway installation is done, the page looks like this:
- Select the Firebox.
- Select Apply template.
- Select the WatchGuard XTM template.
- Select the Firebox.
- Select Add new monitor.
- Select SNMP > SNMP.
- Select Add monitor.
- Configure the Object Identifier (OID). You can type the OID or select it from the MIB tree. If the OID value is a string, from the Value type drop-down list, select Text.
- Add three SNMP monitors:
- XTM Device Model: OID .22.214.171.124.126.96.36.199.0
- XTM Device Name: OID .188.8.131.52.184.108.40.206.0
- XTM Device Version: OID .220.127.116.11.4.1.3097.6.3.1.0
For details about Firebox MIB objects, see:
SNMP monitors information appears on the Monitors tab for the monitored device.
Because of security programs or the firewall configuration, Kaseya may set the name of the discovered device to unknown-MAC address.
To rename a device:
- Select Discovery > Networks > Discovered Devices.
- Select the device.
- Select Rename Device.
The new device name appears in Network Monitor.