If you will use Simple Network Management
Protocol (SNMP) to monitor or manage network elements (for example,
switches and routers) that are within the security zones of Palo
Alto Networks firewalls, you must create a security rule that allows SNMP
services for those elements.
You don’t need a security
rule to enable SNMP monitoring of Palo Alto Networks firewalls,
Panorama, or WF-500 appliances. For details, see
Monitor Statistics Using SNMP.