Home/Catalog/CISCO-FIREWALL-MIB

CISCO-FIREWALL-MIB

MIB module for monitoring Cisco Firewalls.
73
Objects
Active
Status
8
Dependencies

Imported Objects

Objects

73 total
Object Name
ciscoFirewallMIB
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147
SNMPv2-SMI-v1
Unknown
.1.3.6.1.4.1.9.9.147
ciscoFirewallMIBObjects
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1
cfwEvents
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.1
cfwBasicEvents
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.1.1
cfwBasicEventsTableLastRowThe index value of the most recently created row in the cfwBasicEventsTable. This number starts at 1 and increase by one with each new log entry. When this number wraps, all events are deleted.ro
Unsigned32 -- Rsyntax Gauge32
.1.3.6.1.4.1.9.9.147.1.1.1.1
cfwBasicEventsTableTable of basic data for firewall events. The agent may choose to delete the instances of cfwBasicEventsEntry as required because of lack of memory. The oldest Events will be selected first for deletion.
SEQUENCE OF CfwBasicEventsEntry
.1.3.6.1.4.1.9.9.147.1.1.1.2
cfwBasicEventsEntryAn entry in the table, containing general information about an event. This table will always be sparse, i.e., each row will instanciate only a subet of the columnar objects.
CfwBasicEventsEntry
.1.3.6.1.4.1.9.9.147.1.1.1.2.1
cfwBasicEventIndexAn index that uniquely identifies an entry in the log table. These indices are assigned beginning with 1 and increase by one with each new event logged.
Unsigned32 -- Rsyntax Gauge32
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.1
cfwBasicEventTimeThe time that the event occurred.ro
DateAndTime -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.2
cfwBasicSecurityEventTypeThe type of security-related event that this row contains. If the event is not security-related this object will not be instantiated.ro
SecurityEvent -- Rsyntax INTEGER { -- other(1), -- none(2), -- dos(3), -- recon(4), -- pakFwd(5), -- addrSpoof(6), -- svcSpoof(7), -- thirdParty(8), -- complete(9), -- invalPak(10), -- illegCom(11), -- policy(12) -- }
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.3
cfwBasicContentInspEventTypeThe type of content inspection-related event that this row contains. If the event is not content inspection-related this object will not be instantiated.ro
ContentInspectionEvent -- Rsyntax INTEGER { -- other(1), -- okay(2), -- error(3), -- found(4), -- clean(5), -- reject(6), -- saved(7) -- }
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.4
cfwBasicConnectionEventTypeThe type of connection-related event that this row contains. If the event is not connection-related this object will not be instantiated.ro
ConnectionEvent -- Rsyntax INTEGER { -- other(1), -- accept(2), -- error(3), -- drop(4), -- close(5), -- timeout(6), -- refused(7), -- reset(8), -- noResp(9) -- }
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.5
cfwBasicAccessEventTypeThe type of access-related event that this row contains. If the event is not access-related this object will not be instantiated.ro
AccessEvent -- Rsyntax INTEGER { -- other(1), -- grant(2), -- deny(3), -- denyMult(4), -- error(5) -- }
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.6
cfwBasicAuthenticationEventTypeThe type of authentication-related event that this row contains. If the event is not authentication-related this object will not be instantiated.ro
AuthenticationEvent -- Rsyntax INTEGER { -- other(1), -- succ(2), -- error(3), -- fail(4), -- succPriv(5), -- failPriv(6), -- failMult(7) -- }
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.7
cfwBasicGenericEventTypeThe type of generic event that this row contains. If the event does not fall into one of the other categories this object will be populated. Otherwise, this object will not be instantiated.ro
GenericEvent -- Rsyntax INTEGER { -- abnormal(1), -- okay(2), -- error(3) -- }
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.8
cfwBasicEventDescriptionA description of the event. The value of the object may be a zero-length string.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.9
cfwBasicEventDetailsTableRowA pointer to a row in the table containing details about this event. Generally, the table will be the cfwNetEventsTable but a Cisco-defined table may also appear here. If there there is no more detailed information for this event the value of this object will have the value {0 0}.ro
RowPointer -- Rsyntax OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.1.1.2.1.10
cfwNetEvents
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.1.2
cfwNetEventsTableLastRowThe index value of the last row in the cfwNetEventsTable. This number starts at 1 and increase by one with each new log entry. When this number wraps, all events are deleted.ro
Unsigned32 -- Rsyntax Gauge32
.1.3.6.1.4.1.9.9.147.1.1.2.1
cfwNetEventsTableTable of detailed data for network events. The agent may choose to delete the instances of cfwBasicEventsEntry as required because of lack of memory. It is an implementation-specific matter as to when this deletion may occur. It is recommended that the oldest log instances are deleted first.
SEQUENCE OF CfwNetEventsEntry
.1.3.6.1.4.1.9.9.147.1.1.2.2
cfwNetEventsEntryAn entry in the table, containing detailed information about an event. Note that this table may be sparse. If Network Address Translation is not enabled cfwNetEventInsideSrcIpAddress and cfwNetEventInsideDstIpAddress will not be instantiated in the row. If Port Address Translation is not enabled cfwNetEventInsideSrcIpPort and cfwNetEventInsideDstIpPort will not be instantiated in the row. Entries are added to this table at the same time that events are added to the cfwBasicEventsTable. These two tables may be configured to be different sizes so there may not be a one-to-one correspondence between rows in the two tables.
CfwNetEventsEntry
.1.3.6.1.4.1.9.9.147.1.1.2.2.1
cfwNetEventIndexAn index that uniquely identifies an entry in the log table. These indices are assigned beginning with one and increase by one with each new log entry. When this number wraps, all events are deleted in order to allow the NMS to differentiate between old and new events.
Unsigned32 -- Rsyntax Gauge32
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.1
cfwNetEventInterfaceThe interface most closely associated with this event. For example, for an event that relates to the receipt of a packet, this object identifies the interface on which the packet was received. If there are multiple interfaces associated with an event, the interface most closely associated with the cause of the event will be used. For example, for an event for the setup of a TCP connection, the interface on the initiator's side of the connection would be preferred. If there is no associated interface, then this object has the value zero.ro
InterfaceIndexOrZero -- Rsyntax Integer32
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.2
cfwNetEventSrcIpAddressSource IP address in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different source addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.3
cfwNetEventInsideSrcIpAddressSource IP address after Network Address Translation has been applied. If NAT has not been applied to the source address in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different source addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.4
cfwNetEventDstIpAddressDestination IP address in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different destination addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.5
cfwNetEventInsideDstIpAddressDestination IP address after Network Address Translation has been applied. If NAT has not been applied to the destination address in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different destination addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
IpAddress
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.6
cfwNetEventSrcIpPortSource UDP/TCP port in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different source ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
INTEGER
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.7
cfwNetEventInsideSrcIpPortSource UDP/TCP port after Port Address Translation has been applied. If PAT has not been applied to the source port in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different source ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
INTEGER
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.8
cfwNetEventDstIpPortDestination UDP/TCP port in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different destination ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
INTEGER
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.9
cfwNetEventInsideDstIpPortDestination UDP/TCP port after Port Address Translation has been applied. If PAT has not been applied to the Destination port in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different destination ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.ro
INTEGER
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.10
cfwNetEventServiceThe identification of the type of service involved with this event.ro
Services -- Rsyntax INTEGER { -- otherFWService(1), -- fileXferFtp(2), -- fileXferTftp(3), -- fileXferFtps(4), -- loginTelnet(5), -- loginRlogin(6), -- loginTelnets(7), -- remoteExecSunRPC(8), -- remoteExecMSRPC(9), -- remoteExecRsh(10), -- remoteExecXserver(11), -- webHttp(12), -- webHttps(13), -- mailSmtp(14), -- multimediaStreamworks(15), -- multimediaH323(16), -- multimediaNetShow(17), -- multimediaVDOLive(18), -- multimediaRealAV(19), -- multimediaRTSP(20), -- dbOracle(21), -- dbMSsql(22), -- contInspProgLang(23), -- contInspUrl(24), -- directoryNis(25), -- directoryDns(26), -- directoryNetbiosns(27), -- directoryNetbiosdgm(28), -- directoryNetbiosssn(29), -- directoryWins(30), -- qryWhois(31), -- qryFinger(32), -- qryIdent(33), -- fsNfsStatus(34), -- fsNfs(35), -- fsCifs(36), -- protoIcmp(37), -- protoTcp(38), -- protoUdp(39), -- protoIp(40), -- protoSnmp(41) -- }
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.11
cfwNetEventServiceInformationSpecific service information. This can be used to describe the particular service indentified by cfwNetEventService and can reflect whether the service is a local service or a gateway service. For example, if the value for cfwNetEventService is loginTelnet then the string provided might be 'local telnet'.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.12
cfwNetEventIdentityThis object will contain a description of the entity that caused the event. The entity could be a userid, username, processid or other identifier for the entity using the service. If there is no such information then this object will contain a zero-length string.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.13
cfwNetEventDescriptionA detailed description of the event.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.1.2.2.1.14
cfwSystem
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.2
cfwStatus
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.2.1
cfwHardwareStatusTableTable of firewall cfwHardwareStatusEntry entries.
SEQUENCE OF CfwHardwareStatusEntry
.1.3.6.1.4.1.9.9.147.1.2.1.1
cfwHardwareStatusEntryAn entry in the table, containing status information about a resource.
CfwHardwareStatusEntry
.1.3.6.1.4.1.9.9.147.1.2.1.1.1
cfwHardwareTypeThe hardware type for which this row provides status information.
Hardware -- Rsyntax INTEGER { -- memory(1), -- disk(2), -- power(3), -- netInterface(4), -- cpu(5), -- primaryUnit(6), -- secondaryUnit(7), -- other(8) -- }
.1.3.6.1.4.1.9.9.147.1.2.1.1.1.1
cfwHardwareInformationA detailed textual description of the resource identified by cfwHardwareType.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2
cfwHardwareStatusValueThis object contains the current status of the resource.ro
HardwareStatus -- Rsyntax INTEGER { -- other(1), -- up(2), -- down(3), -- error(4), -- overTemp(5), -- busy(6), -- noMedia(7), -- backup(8), -- active(9), -- standby(10) -- }
.1.3.6.1.4.1.9.9.147.1.2.1.1.1.3
cfwHardwareStatusDetailA detailed textual description of the current status of the resource which may provide a more specific description than cfwHardwareStatusValue.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.2.1.1.1.4
cfwStatistics
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.1.2.2
cfwBufferStatsTableA table conatining status information about a firewall's buffers.
SEQUENCE OF CfwBufferStatsEntry
.1.3.6.1.4.1.9.9.147.1.2.2.1
cfwBufferStatsEntryAn entry in the table, containing status information about a particular statistic for the set of buffers of a particular size.
CfwBufferStatsEntry
.1.3.6.1.4.1.9.9.147.1.2.2.1.1
cfwBufferStatSizeThis object contains the size of the set of buffers for which this row contains the statistics given by cfwBufferStatType.
Unsigned32 -- Rsyntax Gauge32
.1.3.6.1.4.1.9.9.147.1.2.2.1.1.1
cfwBufferStatTypeThis object identifies the type of statistic given by this row for the particular set of buffers identified by cfwBufferStatSize.
ResourceStatistics -- Rsyntax INTEGER { -- highUse(1), -- highLoad(2), -- maximum(3), -- minimum(4), -- low(5), -- high(6), -- average(7), -- free(8), -- inUse(9) -- }
.1.3.6.1.4.1.9.9.147.1.2.2.1.1.2
cfwBufferStatInformationA detailed textual description of the statistic identified by cfwBufferStatType.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.2.2.1.1.3
cfwBufferStatValueThe value of the buffer statistic.ro
Gauge32
.1.3.6.1.4.1.9.9.147.1.2.2.1.1.4
cfwConnectionStatTableTable of firewall statistic instances.
SEQUENCE OF CfwConnectionStatEntry
.1.3.6.1.4.1.9.9.147.1.2.2.2
cfwConnectionStatEntryAn entry in the table, containing information about a firewall statistic.
CfwConnectionStatEntry
.1.3.6.1.4.1.9.9.147.1.2.2.2.1
cfwConnectionStatServiceThe identification of the type of connection providing statistics.
Services -- Rsyntax INTEGER { -- otherFWService(1), -- fileXferFtp(2), -- fileXferTftp(3), -- fileXferFtps(4), -- loginTelnet(5), -- loginRlogin(6), -- loginTelnets(7), -- remoteExecSunRPC(8), -- remoteExecMSRPC(9), -- remoteExecRsh(10), -- remoteExecXserver(11), -- webHttp(12), -- webHttps(13), -- mailSmtp(14), -- multimediaStreamworks(15), -- multimediaH323(16), -- multimediaNetShow(17), -- multimediaVDOLive(18), -- multimediaRealAV(19), -- multimediaRTSP(20), -- dbOracle(21), -- dbMSsql(22), -- contInspProgLang(23), -- contInspUrl(24), -- directoryNis(25), -- directoryDns(26), -- directoryNetbiosns(27), -- directoryNetbiosdgm(28), -- directoryNetbiosssn(29), -- directoryWins(30), -- qryWhois(31), -- qryFinger(32), -- qryIdent(33), -- fsNfsStatus(34), -- fsNfs(35), -- fsCifs(36), -- protoIcmp(37), -- protoTcp(38), -- protoUdp(39), -- protoIp(40), -- protoSnmp(41) -- }
.1.3.6.1.4.1.9.9.147.1.2.2.2.1.1
cfwConnectionStatTypeThe state of the connections that this row contains statistics for.
ConnectionStat -- Rsyntax INTEGER { -- other(1), -- totalOpen(2), -- currentOpen(3), -- currentClosing(4), -- currentHalfOpen(5), -- currentInUse(6), -- high(7) -- }
.1.3.6.1.4.1.9.9.147.1.2.2.2.1.2
cfwConnectionStatDescriptionA detailed textual description of this statistic.ro
SnmpAdminString -- Rsyntax OCTET STRING
.1.3.6.1.4.1.9.9.147.1.2.2.2.1.3
cfwConnectionStatCountThis is an integer that contains the value of the resource statistic. If a type of 'gauge' is more appropriate this object will be omitted resulting in a sparse table.ro
Counter32
.1.3.6.1.4.1.9.9.147.1.2.2.2.1.4
cfwConnectionStatValueThis is an integer that contains the value of the resource statistic. If a type of 'counter' is more appropriate this object will be omitted resulting in a sparse table.ro
Gauge32
.1.3.6.1.4.1.9.9.147.1.2.2.2.1.5
ciscoFirewallMIBNotificationPrefix
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.2
ciscoFirewallMIBNotifications
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.2.0
cfwSecurityNotificationThis notification is used for events involving security events. The included objects provide more detailed information about the event.
TRAP-TYPE
.1.3.6.1.4.1.9.9.147.2.0.2
cfwContentInspectNotificationThis notification is used to notify the NMS of content inspection events. The included objects provide more detailed information about the event.
TRAP-TYPE
.1.3.6.1.4.1.9.9.147.2.0.3
cfwConnNotificationThis notification is used to notify the NMS of connection-oriented events. The included objects provide more detailed information about the event.
TRAP-TYPE
.1.3.6.1.4.1.9.9.147.2.0.4
cfwAccessNotificationThis notification is used to notify the NMS of access events. The included objects provide more detailed information about the event.
TRAP-TYPE
.1.3.6.1.4.1.9.9.147.2.0.5
cfwAuthNotificationThis notification is used to notify the NMS of authentication events. The included objects provide more detailed information about the event.
TRAP-TYPE
.1.3.6.1.4.1.9.9.147.2.0.6
cfwGenericNotificationThis notification is used to notify the NMS of events that do not fall into the other categories. The included objects provide more detailed information about the event.
TRAP-TYPE
.1.3.6.1.4.1.9.9.147.2.0.7
ciscoFirewallMIBConformance
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3
ciscoFirewallMIBCompliances
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3.1
ciscoFirewallMIBCompliance
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3.1.1
ciscoFirewallMIBGroups
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3.2
ciscoFirewallMIBEventsGroup
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3.2.1
ciscoFirewallMIBStatisticsGroup
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3.2.2
ciscoFirewallMIBNotificationGroup
OBJECT IDENTIFIER
.1.3.6.1.4.1.9.9.147.3.2.3