CISCO-SSL-PROXY-MIB
AI MIB Summary
The CISCO-SSL-PROXY-MIB monitors and manages Cisco SSL proxy hardware or software instances to track the configuration, operational status, and performance statistics of SSL/TLS termination and acceleration services. It provides visibility into cryptographic session states, proxy service roles (server or client), and protocol-level metrics for TCP, SSL, and TLS transactions.
This MIB module is for managing a Secure Socket Layer (SSL) Proxy device which terminates and accelarates SSL and Transport Layer Security (TLS) transactions.
The proxy device can act as a SSL server or a SSL client depending on the configuration and the application.
In one application, the device acts as a proxy SSL server. It terminates SSL handshakes and TCP connections initiated by SSL clients. The device is configured with a key and a certificate bearing the identity of the SSL server. The device uses this identity to establish the SSL session on behalf of the server, offloading the key establishment and data encryption and decryption work.
After the SSL session has been successfully established between the client and the proxy device, the device starts to receive and decrypt the encrypted data sent from the client and forward to the server. The device forwards the clear data to the server on a backend connection. Clear data sent from the server is encrypted by the proxy device before it is forwarded to the SSL client.
Optionally, the proxy device is configured to reencrypt the decrypted data sent from the client to the server. The proxy device acts as a SSL client to initiate a SSL session to the server. The decrypted data is encrypted within this SSL session to be forwarded to the server. The encrypted data sent from the server to the device is decrypted and then reencrypted before it is forwarded to the client.
In another application, the proxy device forwards data generated by one or more sources to the destination via a SSL session. The proxy device acts as a SSL client and intiates a SSL session to the next hop device. When data is received from the source, the proxy device forwards the data to the next hop using the SSL session. The next hop can continue to forward the data if it is not the destination.
The proxy device supports a number of proxy services. Each proxy service defines the role of the proxy device, whether it acts as a SSL server or a SSL client. The rest of the configuration include cryptographic and protocol parameters.
This MIB is used for monitoring the configuration, statuses and statistics of the proxy services and the protocols including TCP, SSL and TLS.
Main OID:
ciscoSslProxyMIB.1.3.6.1.4.1.9.9.370
269
Objects
Active
Status
7
Dependencies
Imported Objects
Objects
269 total| Object Name |
|---|
ciscoSslProxyMIBThis MIB module is for managing a Secure Socket Layer
(SSL) Proxy device which terminates and accelarates
SSL and Transport Layer Security (TLS) transactions.
The proxy device can act as a SSL server or a SSL client
depending on the configuration and the application.
In one application, the device acts as a proxy SSL
server. It terminates SSL handshakes and TCP connections
initiated by SSL clients. The device is configured with
a key and a certificate bearing the identity of the SSL
server. The device uses this identity to establish the
SSL session on behalf of the server, offloading the key
establishment and data encryption and decryption work.
After the SSL session has been successfully established
between the client and the proxy device, the device
starts to receive and decrypt the encrypted data sent
from the client and forward to the server. The device
forwards the clear data to the server on a backend
connection. Clear data sent from the server is encrypted
by the proxy device before it is forwarded to the SSL
client.
Optionally, the proxy device is configured to reencrypt
the decrypted data sent from the client to the server.
The proxy device acts as a SSL client to initiate a SSL
session to the server. The decrypted data is encrypted
within this SSL session to be forwarded to the server.
The encrypted data sent from the server to the device
is decrypted and then reencrypted before it is
forwarded to the client.
In another application, the proxy device forwards data
generated by one or more sources to the destination
via a SSL session. The proxy device acts as a SSL
client and intiates a SSL session to the next hop
device. When data is received from the source, the
proxy device forwards the data to the next hop using
the SSL session. The next hop can continue to forward
the data if it is not the destination.
The proxy device supports a number of proxy services.
Each proxy service defines the role of the proxy device,
whether it acts as a SSL server or a SSL client. The
rest of the configuration include cryptographic and
protocol parameters.
This MIB is used for monitoring the configuration,
statuses and statistics of the proxy services and
the protocols including TCP, SSL and TLS. MODULE-IDENTITY .1.3.6.1.4.1.9.9.370 |
cspMIBNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.0 |
cspServOperStatusThe proxy service operation status change notification.
When the Operation Status of a proxy service changes,
and cspGcNotifyProxyServOperStatus is 'true',
a notification will be issued. The notification
contains the current operation status and the down
reason of the proxy service. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.370.0.1 |
cspServCertExpiringThe proxy service certificate expiring notification.
If the time interval cspGcPSCertExpireInterval is
positive, and cspGcNotifyPSCertExpiring is 'true', a
notification will be issued for every proxy service
certificate that will be expiring within this time
interval.
This notification is issued only once for each of
these certificates. If the interval is changed from a
positive value to 0, the proxy device will clear its
memory of notification issued in the past, and stop
issuing new notification.
The notification contains the subject name, the
serial number and the issuer name of the certificate,
the serial number of the issuer's certificate,
and the end date on the certificate. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.370.0.2 |
cspSSLResourceLimitReachedThis notification is issued on the following scenarios:
1) When the value of cpsSslActiveConnPcnt exceeds the value of
cspSslConfigHighConnPcnt
2) When the value of cpsSslActiveConn falls below the
watermark value represented by cspSslConfigWatermarkPcnt. NOTIFICATION-TYPE .1.3.6.1.4.1.9.9.370.0.3 |
cspMIBObjects OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1 |
cspGlobalConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.1 |
cspGcVersionThe version information of the SSL proxy device, for
display only.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.1.1 |
cspGcFIPSModeAn indication of whether or not the proxy device is
operating in FIPS (Federal Information Processing
Standards) approved mode.
If 'true', the proxy device is operating in FIPS mode.
When the device operates in FIPS mode, only approved
cryptographic algorithms and key strengths are enabled.
Authentication and other security requirements of FIPS
will also be enforced in this mode.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.2 |
cspGcRSArc4128md5An indication of whether or not the proxy device
supports the cipher suite RSA_WITH_RC4_128_MD5.
If 'true', the cipher suite is supported.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.3 |
cspGcRSArc4128shaAn indication of whether or not the proxy device
supports the cipher suite RSA_WITH_RC4_128_SHA.
If 'true', the cipher suite is supported.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.4 |
cspGcRSAdescbcshaAn indication of whether or not the proxy device
supports the cipher suite RSA_WITH_DES_CBC_SHA.
If 'true', the cipher suite is supported.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.5 |
cspGcRSA3descbcshaAn indication of whether or not the proxy device
supports the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
If 'true', the cipher suite is supported.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.6 |
cspGcNotifyProxyServOperStatusAn indication of whether or not a cspServOperStatus
notification should be issued when the operation
status of proxy services changes.
If such a notification is desired, it is the
responsibility of the management entity to ensure that
the SNMP administrative model is configured in such a
way as to allow the notification to be delivered.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.7 |
cspGcNotifyPSCertExpiringAn indication of whether or not a cspServCertExpiring
notification should be issued when a proxy service
certificate will be expiring in the configured time
interval cspGcPSCertExpireInterval.
If such a notification is desired, it is the
responsibility of the management entity to ensure that
the SNMP administrative model is configured in such a
way as to allow the notification to be delivered.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.1.8 |
cspGcPSCertExpireIntervalThe proxy service certificate expiration time interval,
used to determine when the cspServCertExpiring
notification should be issued if
cspGcNotifyPSCertExpiring is 'true'.
If this time interval is 0, no proxy service
certification expiration will be checked.rw Integer32 .1.3.6.1.4.1.9.9.370.1.1.9 |
cspPsConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.2 |
cspPsTableA list of proxy service configuration entries. SEQUENCE OF CspPsEntry .1.3.6.1.4.1.9.9.370.1.2.1 |
cspPsEntryThe proxy service configuration entry.
Each entry indicates the name and the index of a proxy
service, and a set of configuration parameters to be
applied on this proxy service.
A unique name can be assigned to each proxy service.
Optionally, multiple proxy services can be grouped into
a proxy list. All the services in a list have the
same name, and each service is assigned a unique index
within the list.
Each proxy service has a virtual and a server address.
This entry reports the address and port configuration,
and the administrative and operational statuses of each
proxy service. If a service is not operational, the
reason for its being 'down' is also reported. CspPsEntry .1.3.6.1.4.1.9.9.370.1.2.1.1 |
cspPsNameThe name of a proxy service. A unique name string
can be assigned to one proxy service or a list of
proxy services.
When the name is assigned to a list of proxy services,
each proxy service is identified by a unique index
within the list. SnmpAdminString .1.3.6.1.4.1.9.9.370.1.2.1.1.1 |
cspPsListIndexThe unique index of a proxy service within a list.
If the cspPsName string is assigned to a list of
proxy services, this index is used to identify
a proxy service within the list.
If the cspPsName string is unique per proxy service,
this index is not used, and the value shall be 0. Integer32 .1.3.6.1.4.1.9.9.370.1.2.1.1.2 |
cspPsServiceTypeThe type of proxy service: 'server(1)' or 'client(2)'.
When servicing a 'server' type proxy service, the proxy
device acts as a SSL server. It terminates the SSL
handshake initiated by a SSL client, and forwards the
data sent from the client to the destination.
When servicing a 'client' type proxy service, the proxy
device acts as a SSL client. It initiates a SSL
handshake to a SSL server, and forwards data sent from
one or more data sources to the SSL server.rw Enumeration .1.3.6.1.4.1.9.9.370.1.2.1.1.3 |
cspPsVirtualAddressTypeAn indication of the type of address contained in
cspPsVirtualAddress.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.370.1.2.1.1.4 |
cspPsVirtualAddressThe virtual address. This address is used by the data
source to send data that can be received by the proxy
device and forwarded to the destination.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.370.1.2.1.1.5 |
cspPsVirtualPortThe virtual TCP port number. This port number is used
by the data source to send data that can be received
by the proxy device and forwarded to the destination.rw CiscoPort (CISCO-TC) .1.3.6.1.4.1.9.9.370.1.2.1.1.6 |
cspPsServerAddressTypeAn indication of the type of address contained in
cspPsServerAddress.rw InetAddressType (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.370.1.2.1.1.7 |
cspPsServerAddressThe server address. This address is used by the proxy
device to send or forward data to the destination.rw InetAddress (INET-ADDRESS-MIB) .1.3.6.1.4.1.9.9.370.1.2.1.1.8 |
cspPsServerPortThe server TCP port number. This port number is used
by the proxy device to send or forward data to the
destination.rw CiscoPort (CISCO-TC) .1.3.6.1.4.1.9.9.370.1.2.1.1.9 |
cspPsAdminStatusThe administrative status of the proxy service.
Each proxy service can be configured to be
administratively 'up' or 'down'. If the Adminstrative
Status is 'down', the service will not be operational.rw Enumeration .1.3.6.1.4.1.9.9.370.1.2.1.1.10 |
cspPsOperStatusThe operational status of a proxy service. For a
proxy service to be operational, its administrative
status needs to be 'up'.
If the administrative status is 'up', the
operational status will be changed from 'down' to
'up' automatically once all the required configuration
parameters and resources, including necessary keys and
certificates, become available.
If one or more required resources are removed (e.g.
the certificate has expired), the operational status
will be changed to 'down' automatically.ro Enumeration .1.3.6.1.4.1.9.9.370.1.2.1.1.11 |
cspPsOperDownReasonThe reason for the operational status to be 'down'.
Possible values are:
other(1) : Unknown or undefined reason,
notApplicable(2) : Administratively 'down',
noConnectivity(3) : No Connectivity to the client,
the server, or the gateway,
noVirtualAddr(4) : Virtual Address not configured,
noServerAddr(5) : Server Address not configured,
noCert(6) : Certificate configured, but
invalid or missing,
certNotConfigured(7): Certificate not configured.ro Enumeration .1.3.6.1.4.1.9.9.370.1.2.1.1.12 |
cspPsConfigRowStatusThe conceptual row status of the proxy service
configuration entry.
An entry cannot have the status 'active' until values
have been assigned to the following objects:
cspPsVirtualAddress,
cspPsVirtualPort,
cspPsServerAddress and
cspPsServerPort.
This entry can be modified when the status is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.2.1.1.13 |
cspPsPolicyConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.3 |
cspPsPolicyTableA list of proxy service policy configuration entries. SEQUENCE OF CspPsPolicyEntry .1.3.6.1.4.1.9.9.370.1.3.1 |
cspPsPolicyEntryThe proxy service policy entry. Each proxy service
policy entry contains the name of each type of policy
configured for the proxy service.
A policy is a set of configuration parameters and rules
to observe for implementing a protocol or an operation.
One or more of the following policies can be configured
for a proxy service:
TCP protocol policy for virtual connections,
TCP protocol policy for server connections,
SSL protocol policy,
HTTP header insertion policy, and
URL rewrite policy. CspPsPolicyEntry .1.3.6.1.4.1.9.9.370.1.3.1.1 |
cspPspVirTcpPolicyNameThe name of the TCP protocol policy configured for
the virtual side connections. If no TCP policy is
configured, the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.3.1.1.1 |
cspPspSerTcpPolicyNameThe name of the TCP protocol policy configured for
the server side connections. If no TCP policy is
configured, the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.3.1.1.2 |
cspPspSslPolicyNameThe name of the SSL protocol policy configured for
the SSL handshake and data encryption and decryption.
If no SSL policy is configured, the name will be a NULL
string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.3.1.1.3 |
cspPspHttpHdrPolicyNameThe name of the HTTP header insertion policy. A number
of fields can be inserted into the HTTP headers when
the proxy service is forwarding data. The policy
specifies the header insertion parameters. If no policy
is configured, the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.3.1.1.4 |
cspPspUrlRewritePolicyNameThe name of the URL rewrite policy. The policy
specifies configuration parameters for rewriting URLs
in HTTP headers and payload. If no policy is configured,
the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.3.1.1.5 |
cspPsKeyCertConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.4 |
cspPsKeyCertTableA list of proxy service key and certificate
configuration entries. SEQUENCE OF CspPsKeyCertEntry .1.3.6.1.4.1.9.9.370.1.4.1 |
cspPsKeyCertEntryThe proxy service key and certificate configuration
entry. This entry specifies the key usage, optionally
the trust point name, the certificate and the key file
names, the key size and time of generation or import,
and some important attributes of the certificate. CspPsKeyCertEntry .1.3.6.1.4.1.9.9.370.1.4.1.1 |
cspPskcKeyUsageAn indication of the usage of a key assigned to a
proxy service. Each proxy service can be assigned one
or more keys.
The key can be used for signing only, for data
encryption and decryption only, or for general purpose
(that is, it can be used for both signing and data
encryption and decryption).
The following values are defined:
rsaSigning(1) : RSA key used for signing only,
rsaEncryption(2) : RSA key used for data encryption
and decryption only,
rsaGeneralPurpose(3): RSA key used for both signing and
data encryption and decryption. Enumeration .1.3.6.1.4.1.9.9.370.1.4.1.1.1 |
cspPskcTrustPointNameThe name of a trust point assigned to the proxy
service. The trust point contains information that
can be used for certificate enrollment or for importing
keys and certificates.
A trust point may also contain identifying information
about keys and certificates, and the path and the
protocol to be used for the proxy device to
communicate with a Certificate Authority which
issues certificates for the proxy service.
If no trust point is assigned to the proxy service,
the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.2 |
cspPskcCertFileNameThe name of the file storing the certificate. If
there is no such file, the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.3 |
cspPskcKeyNameThe name of a key assigned to the proxy service.
If there is no key assigned, the name will be a NULL
string. If the key is stored in a file, the file name
may be used to identify the key, and this name will be
a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.4 |
cspPskcKeyFileNameThe name of the file storing the key. If there is no
such file, the name will be a NULL string.rw SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.5 |
cspPskcKeySizeThe size of the key.
The following modulus sizes are defined for RSA keys:
512-bit, 768-bit, 1024-bit, 1536-bit and 2048-bit.ro Enumeration .1.3.6.1.4.1.9.9.370.1.4.1.1.6 |
cspPskcKeyTimeThe time of generation of the key, if known. If the key
is imported to the proxy device, this time can indicate
the time of import if the time of generation is unknown.
If the time is not known, this will be a NULL string.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.7 |
cspPskcCertStatusThe status of the certificate that is used to publish
the public key.
The following values are defined:
Valid(1) : Certificate is valid,
Expired(2) : Certificate has expired,
Rolling Over(3): Certificate is being renewed.
Whether or not an expired certificate can be used for
the proxy service is implementation specific.ro Enumeration .1.3.6.1.4.1.9.9.370.1.4.1.1.8 |
cspPskcCertSubjNameThe subject name of the certificate assigned to the
proxy service. If there is no subject name on the
certificate, this will be a NULL string.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.9 |
cspPskcCertSerialNumThe serial number of the certificate assigned to the
proxy service. If there is no serial number on the
certificate, this will be a NULL string.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.10 |
cspPskcIssuerNameThe issuer name of the certificate assigned to the
proxy service. If the issuer name of the certificate is
not known, this will be a NULL string.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.11 |
cspPskcIssuerCertSerialNumThe serial number of the issuer's certificate.
If the serial number of the issuer's certificate is not
known, this will be a NULL string.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.12 |
cspPskcCertStartDateThe time when the certificate starts to be valid,
corresponding to the notBefore time on the certificate.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.13 |
cspPskcCertEndDateThe time when the certificate validity ends,
corresponding to the notAfter time on the certificate.ro SnmpAdminString .1.3.6.1.4.1.9.9.370.1.4.1.1.14 |
cspPskcConfigRowStatusThe conceptual row status of the proxy service key and
certificate configuration entry. This entry can be
modified when the status is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.4.1.1.15 |
cspTcpPolicyConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.5 |
cspTcpPolicyTableA list of TCP Policy entries SEQUENCE OF CspTcpPolicyEntry .1.3.6.1.4.1.9.9.370.1.5.1 |
cspTcpPolicyEntryTCP Policy configuration entry. Each entry defines
a set of TCP protocol parameters. A policy can be
applied to one or more proxy services. CspTcpPolicyEntry .1.3.6.1.4.1.9.9.370.1.5.1.1 |
cspTpPolicyNameThe unique name of a TCP policy. SnmpAdminString .1.3.6.1.4.1.9.9.370.1.5.1.1.1 |
cspTpSynTimeOutThe TCP connection SYN timeout value. This is the
amount of time the SSL proxy waits before failing the
connection establishment attempt.rw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.2 |
cspTpInActivityTimeOutThe TCP connection inactivity timeout value. This is
the amount of time the SSL proxy waits for the next
packet to arrive on a TCP connection, if no packet is
received within this period then the connection is
considered to be inactive and aborted.rw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.3 |
cspTpNagleAlgoIf 'true', the Nagle Algorithm is enabled during the
SSL or TLS data phase to concatenate a number of small
messages to avoid sending small messages into the
network.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.5.1.1.4 |
cspTpFinWaitTimeOutThe TCP connection FIN-WAIT2 state timeout value.
This is the amount of time the SSL proxy waits
for a FIN from the peer after it has initiated close
and is in FIN-WAIT2 state.rw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.5 |
cspTpReassemTimeOutThe TCP connection reassembly timeout value. This is
the amount of time the SSL proxy waits during the TCP
out of order traffic reassembly process for the next
expected in sequence segment to arrive.rw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.6 |
cspTpRcvBufShrLimThe receive buffer share limit per connection. This
is used by SSL proxy to calculate the maximum window
to advertise during the 3 way handshake, and is also
the maximum share of the receive buffer pool that
would be allocated for this connection.rw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.7 |
cspTpTransBufShrLimThe transmit buffer share limit per connection. This
is the maximum share of the send buffer pool that
would be allocated for this connection.rw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.8 |
cspTpMssThe TCP maximum segment size. This is the MSS value
offered by the SSL proxy during 3-way handshakerw Integer32 .1.3.6.1.4.1.9.9.370.1.5.1.1.9 |
cspTpPathMtuDiscIf 'true', the Path MTU Discovery algorithm is
enabled.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.5.1.1.10 |
cspTpConfigRowStatusThe conceptual row status of the TCP policy
configuration entry. This entry can be modified when
the status is 'active'.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.5.1.1.11 |
cspSslPolicyConfig OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.6 |
cspSslPolicyTableA list of SSL protocol policy configuration entries. SEQUENCE OF CspSslPolicyEntry .1.3.6.1.4.1.9.9.370.1.6.1 |
cspSslPolicyEntryA SSL policy defines a set of cipher suites to be
supported, and the SSL or TLS protocol parameters.
Each policy can be assigned to one or more proxy
services.
If no SSL policy is assigned to a proxy service, all
supported cipher suites and all protocol versions
will be enabled by default. CspSslPolicyEntry .1.3.6.1.4.1.9.9.370.1.6.1.1 |
cspSpPolicyNameThe unique name of a SSL protocol policy. SnmpAdminString .1.3.6.1.4.1.9.9.370.1.6.1.1.1 |
cspSpRSArc4128md5An indication of whether or not the cipher suite
RSA_WITH_RC4_128_MD5 is configured. If 'true', the
cipher suite is configured.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.6.1.1.2 |
cspSpRSArc4128shaAn indication of whether or not the cipher suite
RSA_WITH_RC4_128_SHA is configured. If 'true', the
cipher suite is configured.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.6.1.1.3 |
cspSpRSAdescbcshaAn indication of whether or not the cipher suite
RSA_WITH_DES_CBC_SHA is configured. If 'true', the
cipher suite is configured.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.6.1.1.4 |
cspSpRSA3descbcshaAn indication of whether or not the cipher suite
RSA_WITH_3DES_EDE_CBC_SHA is configured. If 'true',
the cipher suite is configured.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.6.1.1.5 |
cspSpProtocolThe set of SSL and TLS protocols to be supported.
The following values are defined:
other(1) : An unspecified protocol,
SSL 3.0(2) : Support SSL 3.0 protocol only,
TLS 1.0(3) : Support TLS 1.0 protocol only,
ssl3AndTls1(3) : Support both SSL 3.0 and TLS 1.0rw Enumeration .1.3.6.1.4.1.9.9.370.1.6.1.1.6 |
cspSpCloseProtocolAn indication of whether or not the SSL close protocol
is enforced.
If 'true', the close protocol is enforced. A
close-notify alert message is sent to the peer, and a
close-notify alert message is expected from the peer.
If 'false', the close protocol is not enforced. The
proxy service sends a close-notify alert message to
the peer; however, the proxy service does not expect
a close-notify alert from the peer before tearing down
the session.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.6.1.1.7 |
cspSpSessionCacheThe SSL session cache size. The session cache is used
to store a number of most recently used session
identifiers.
Session identifiers can be reused if a new connection
requests to use a session identifier that is found in
the cache. This object specifies the maximum size of
the cache.rw Integer32 .1.3.6.1.4.1.9.9.370.1.6.1.1.8 |
cspSpSessionTimeOutThe SSL session timeout value. The session entry
will be removed from the session cache after the
configured timeout. Once the session entry is
removed, subsequent connections cannot reuse the
session.
If this timeout value is 0, entries in the session
cache will not timeout.rw Integer32 .1.3.6.1.4.1.9.9.370.1.6.1.1.9 |
cspSpConfigRowStatusThe row status of the SSL policy configuration entry.
This entry can be modified when the status is 'active'.rw RowStatus UNITS "seconds" .1.3.6.1.4.1.9.9.370.1.6.1.1.10 |
cspTcpCountersInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.7 |
cspTcpCountersClearTimeThe last time when the TCP counters were cleared.
If the proxy device does not allow these counters to be
cleared, the timestamp should have a value of zero.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.7.1 |
cspTcpCounters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.8 |
cspTcConnInitThe total number of TCP connections initiated by the
proxy device.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.8.1 |
cspTcConnAcceptThe total number of TCP connections accepted by the
proxy device.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.8.2 |
cspTcConnEstabThe total number of TCP connections established.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.8.3 |
cspTcConnDropThe total number of TCP connections dropped.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.8.4 |
cspTcConnClosedThe total number of TCP connections closed.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.8.5 |
cspTcSynTimeOutsThe total number of SYN timeouts.ro Counter32 .1.3.6.1.4.1.9.9.370.1.8.6 |
cspTcIdleTimeOutsThe total number of idle timeouts.ro Counter32 .1.3.6.1.4.1.9.9.370.1.8.7 |
cspTcTotalPktSentThe total number of TCP packets sent.ro Counter32 UNITS "number of packets" .1.3.6.1.4.1.9.9.370.1.8.8 |
cspTcDataPktSentThe total number of TCP data packets sent.ro Counter32 UNITS "number of packets" .1.3.6.1.4.1.9.9.370.1.8.9 |
cspTcDataByteSentThe total amount of data sent.ro Counter32 UNITS "bytes" .1.3.6.1.4.1.9.9.370.1.8.10 |
cspTcTotalPktRcvThe total number of TCP packets received.ro Counter32 UNITS "number of packets" .1.3.6.1.4.1.9.9.370.1.8.11 |
cspTcPktRcvSeqThe total number of TCP data packets received in
sequence.ro Counter32 UNITS "number of packets" .1.3.6.1.4.1.9.9.370.1.8.12 |
cspTcByteRcvSeqThe total amount of data received in sequence.ro Counter32 UNITS "bytes" .1.3.6.1.4.1.9.9.370.1.8.13 |
cspSslCountersInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.9 |
cspSslCountersClearTimeThe last time when the SSL counters were cleared.
If the proxy device does not allow these counters to be
cleared, the timestamp should have a value of zero.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.9.1 |
cspSslCounters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.10 |
cspScConnAttemptThe total number of SSL connections attempted.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.10.1 |
cspScConnCompleteThe total number of SSL connections completed.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.10.2 |
cspScConnInHandShakeThe number of SSL connections currently in handshake
phase.ro Gauge32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.10.3 |
cspScConnInDataPhaseThe number of SSL connections currently in data phase.ro Gauge32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.10.4 |
cspScRenegAttemptThe total number of SSL renegotiations attempted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.10.5 |
cspScConnInRenegThe number of SSL connections currently in
renegotiation phasero Gauge32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.10.6 |
cspScActiveSessionsThe number of active SSL sessions. This number
indicates the number of valid session entries in
the session cache.ro Gauge32 .1.3.6.1.4.1.9.9.370.1.10.7 |
cspScMaxHandShakeConnsThis indicates the maximum number of connections
present in handshake phase at any point of timero Gauge32 .1.3.6.1.4.1.9.9.370.1.10.8 |
cspScCurrDeviceQLenThe current device queue length. Indicates the number
of requests pending with the device.ro Gauge32 .1.3.6.1.4.1.9.9.370.1.10.9 |
cspScMaxDeviceQLenThe maximum device queue length recorded. Indicates
the maximum number of requests queued to the device
at any point of time.ro Gauge32 .1.3.6.1.4.1.9.9.370.1.10.10 |
cspScSessionReusesThe number of session reuses. Indicates the number
of times the sessions got reused before the session
timer expired.ro Counter32 .1.3.6.1.4.1.9.9.370.1.10.11 |
cspSsl3Counters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.11 |
cspS3cFullHandShakeThe total number of full SSL 3.0 handshakes completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.11.1 |
cspS3cResumedHandShakeThe total number of SSL 3.0 resumed handshakes
completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.11.2 |
cspS3cHandShakeFailedThe total number of SSL 3.0 connections failed in
handshake phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.11.3 |
cspS3cDataFailedThe total number of SSL 3.0 sessions failed in
data phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.11.4 |
cspS3cBadMacRcvdThe total number of received SSL 3.0 records
which have bad MAC (Message Authentication Code).ro Counter32 .1.3.6.1.4.1.9.9.370.1.11.5 |
cspS3cPadErrorsThe total number of received SSL 3.0 records
which have pad errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.11.6 |
cspS3cRSArc4128md5The total number of SSL 3.0 connections which used
cipher suite RSA_WITH_RC4_128_MD5.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.11.7 |
cspS3cRSArc4128shaThe total number of SSL 3.0 connections which used
cipher suite RSA_WITH_RC4_128_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.11.8 |
cspS3cRSAdescbcshaThe total number of SSL 3.0 connections which used
cipher suite RSA_WITH_DES_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.11.9 |
cspS3cRSA3desedecbcshaThe total number of SSL 3.0 connections which used
cipher suite RSA_WITH_3DES_EDE_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.11.10 |
cspTls1Counters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.12 |
cspTlcFullHandShakeThe total number of full TLS 1.0 handshakes completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.12.1 |
cspTlcResumedHandShakeThe total number of resumed TLS 1.0 handshakes
completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.12.2 |
cspTlcHandShakeFailedThe total number of TLS 1.0 connections failed in
handshake phase.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.12.3 |
cspTlcDataFailedThe total number of TLS 1.0 connections failed in
data phase.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.12.4 |
cspTlcBadMacRcvdThe total number of received TLS 1.0 records
which have bad MAC (Message Authentication Code.ro Counter32 .1.3.6.1.4.1.9.9.370.1.12.5 |
cspTlcPadErrorsThe total number of received TLS 1.0 records
which have pad errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.12.6 |
cspTlcRSArc4128md5The total number of TLS 1.0 connections which used
the cipher suite RSA_WITH_RC4_128_MD5.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.12.7 |
cspTlcRSArc4128shaThe total number of TLS 1.0 connections which used
the cipher suite RSA_WITH_RC4_128_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.12.8 |
cspTlcRSAdescbcshaThe total number of TLS 1.0 connections which used
the cipher suite RSA_WITH_DES_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.12.9 |
cspTlcRSA3desedecbcshaThe total number of TLS 1.0 connections which used
the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.12.10 |
cspSslCryptoCounters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.13 |
cspSccBlksEncryptedThe total number of data blocks that got encrypted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.13.1 |
cspSccBlksDecryptedThe total number of data blocks that got decrypted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.13.2 |
cspSccBytesEncryptedThe total number of bytes that got encrypted.ro Counter32 UNITS "bytes" .1.3.6.1.4.1.9.9.370.1.13.3 |
cspSccBytesDecryptedThe total number of bytes that got decrypted.ro Counter32 UNITS "bytes" .1.3.6.1.4.1.9.9.370.1.13.4 |
cspSccPublicKeyOpersThe total number of RSA public key operations
performed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.13.5 |
cspSccPrivateKeyOpersThe total number of RSA private key operations
performed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.13.6 |
cspSccCryptoFailsThe total number of failed cryptographic operations.ro Counter32 .1.3.6.1.4.1.9.9.370.1.13.7 |
cspSccDmaErrorsThe total number of cryptographic device DMA errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.13.8 |
cspSslErrorCounters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.14 |
cspSecSessAllocFailedThe total number of times SSL session could not
be allocated.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.1 |
cspSecSessLimitExceedThe total number of times configured SSL session
limit got exceeded. The new connections will be
rejected if the session limit is exceeded.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.2 |
cspSecHShakeInitFailedThe total number of times SSL connections failed
even before the handshake phase got started. This
typically indicates that there is some connectivity
problem with the server.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.3 |
cspSecRenegFailedThe total number of times SSL renegotiation failed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.4 |
cspSecFatalAlertsRcvdThe total number of fatal alerts received.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.5 |
cspSecFatalAlertsSentThe total number of fatal alerts sent.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.6 |
cspSecNoCipherAlertsThe total number of ALERT_HANDSHAKE_FAIL alerts sent
due to unsupported cipher suites.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.7 |
cspSecVerMismatchAlertsThe total number of ALERT_PROTOCOL_VERSION alerts
sent due to unsupported version number.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.8 |
cspSecNoComprsnAlertsThe total number of ALERT_HANDSHAKE_FAIL alerts sent
due to unsupported compression scheme.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.9 |
cspSecHShakeHndleMemFailThe total number of handshake handle memory allocation
failure.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.10 |
cspSecStalePakDropThe total number of stale packets dropped. Indicates
the number of packets received after the SSL connection
is torn down.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.11 |
cspSecServiceIdDiscardThe total number of connections rejected because of
invalid service identifiers.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.12 |
cspSecHShakeLimitExceedThe total number of times simultaneous handshake
connection exceeded the capacity. The new connections
will be rejected if the total number of simultaneous
handshake connections exceeds the limit.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.13 |
cspSecDevConnCtxtFailThe total number of times device context could not
be allocated.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.14 |
cspSecMemAllocFailedThe total number of times memory allocation failed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.15 |
cspSecBuffAllocFailedThe total number of times buffer allocation failed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.16 |
cspSecAlertSendFailedThe total number of failure to send alerts. This is
typically because of the memory allocation failure.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.17 |
cspSecOverloadDroppedThe total number of connections rejected because
of overload conditions. This indicates that the
incoming rate is higher than what can be handled.ro Counter32 .1.3.6.1.4.1.9.9.370.1.14.18 |
cspSecConnAbortedThe total number of SSL connections aborted.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.14.19 |
cspPsCounters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.15 |
cspPsCountersTableA list of proxy service global counter entries SEQUENCE OF CspPsCounterEntry .1.3.6.1.4.1.9.9.370.1.15.1 |
cspPsCounterEntryThe proxy service global counter entry. Each entry
displays the global SSL counters collected for a proxy
service. CspPsCounterEntry .1.3.6.1.4.1.9.9.370.1.15.1.1 |
cspPscClearTimeThe last time when counters in this entry were
cleared.
If the proxy device does not allow these counters to be
cleared, the timestamp should have a value of zero.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.15.1.1.1 |
cspPscConnAttemptThe total number of SSL connections attempted.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.15.1.1.2 |
cspPscConnCompleteThe total number of SSL connections completed.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.15.1.1.3 |
cspPscFullHandShakeThe total number of full handshakes completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.4 |
cspPscResumedHandShakeThe total number of resumed handshakes completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.5 |
cspPscConnInHandShakeThe number of connections currently in handshake
phase.ro Gauge32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.15.1.1.6 |
cspPscConnInDataPhaseThe number of connections currently in data phase.ro Gauge32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.15.1.1.7 |
cspPscRenegAttemptThe total number of SSL renegotiations attempted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.8 |
cspPscConnInRenegThe number of connections currently in renegotiation
phase.ro Gauge32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.15.1.1.9 |
cspPscBlksEncryptedThe total number of data blocks that got encrypted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.10 |
cspPscBlksDecryptedThe total number of data blocks that got decrypted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.11 |
cspPscBytesEncryptedThe total number of bytes that got encrypted.ro Counter32 UNITS "bytes" .1.3.6.1.4.1.9.9.370.1.15.1.1.12 |
cspPscBytesDecryptedThe total number of bytes that got decrypted.ro Counter32 UNITS "bytes" .1.3.6.1.4.1.9.9.370.1.15.1.1.13 |
cspPscValidSessionsThe total number of current valid sessions in the
session cache.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.14 |
cspPscSessLimitExceedThe total number of times configured SSL session
limit got exceeded. The new connections will be
rejected if the session limit is exceeded.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.15 |
cspPscHandShakeFailedThe total number of times SSL connections failed
in handshake phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.16 |
cspPscDataFailedThe total number of times SSL connections failed
in data phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.17 |
cspPscFatalAlertsRcvdThe total number of fatal alerts received.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.18 |
cspPscFatalAlertsSentThe total number of fatal alerts sent.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.19 |
cspPscBadMacRcvdThe total number of received SSL records which
have bad MAC (Message Authentication Code).ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.20 |
cspPscPadErrorsThe total number of received SSL records which
have pad errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.21 |
cspPscNoCipherAlertsThe total number of alerts sent due to unsupported
cipher suites.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.22 |
cspPscNoComprsnAlertsThe total number of alerts sent due to unsupported
compression scheme.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.23 |
cspPscVerMismatchAlertsThe total number of alerts sent due to unsupported
SSL or TLS version.ro Counter32 .1.3.6.1.4.1.9.9.370.1.15.1.1.24 |
cspPsSsl3Counters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.16 |
cspPsSsl3CountersTableA list of proxy service SSL 3.0 counter entries. SEQUENCE OF CspPsSsl3CounterEntry .1.3.6.1.4.1.9.9.370.1.16.1 |
cspPsSsl3CounterEntryThe proxy service SSL 3.0 counter entry. This entry
reports the counters collected about the SSL 3.0
protocol for each proxy service. CspPsSsl3CounterEntry .1.3.6.1.4.1.9.9.370.1.16.1.1 |
cspPs3cClearTimeThe last time when counters in this entry were cleared.
If the proxy device does not allow these counters to be
cleared, the timestamp should have the value of zero.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.16.1.1.1 |
cspPs3cFullHandShakeThe total number of SSL 3.0 full handshakes completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.16.1.1.2 |
cspPs3cResumedHandShakeThe total number of SSL 3.0 resumed handshakes
completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.16.1.1.3 |
cspPs3cHandShakeFailedThe total number of SSL 3.0 connections failed in
handshake phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.16.1.1.4 |
cspPs3cDataFailedThe total number of SSL 3.0 connections failed in
data phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.16.1.1.5 |
cspPs3cBadMacRcvdThe total number of received SSL 3.0 records
which have bad MAC (Message Authentication Code).ro Counter32 .1.3.6.1.4.1.9.9.370.1.16.1.1.6 |
cspPs3cPadErrorsThe total number of received SSL 3.0 records
which have pad errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.16.1.1.7 |
cspPs3cRSArc4128md5The total number of SSL 3.0 connections that used the
cipher suite RSA_WITH_RC4_128_MD5.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.16.1.1.8 |
cspPs3cRSArc4128shaThe total number of SSL 3.0 connections that used the
cipher suite RSA_WITH_RC4_128_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.16.1.1.9 |
cspPs3cRSAdescbcshaThe total number of SSL 3.0 connections that used the
cipher suite RSA_WITH_DES_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.16.1.1.10 |
cspPs3cRSA3desedecbcshaThe total number of SSL 3.0 connections that used the
cipher suite RSA_WITH_3DES_EDE_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.16.1.1.11 |
cspPsTls1Counters OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.17 |
cspPsTls1CountersTableA list of proxy service TLS 1.0 counter entries. SEQUENCE OF CspPsTls1CounterEntry .1.3.6.1.4.1.9.9.370.1.17.1 |
cspPsTls1CounterEntryThe proxy service TLS 1.0 counter entry. This entry
displays counters collected about the TLS 1.0 protocol
for each proxy service. CspPsTls1CounterEntry .1.3.6.1.4.1.9.9.370.1.17.1.1 |
cspPt1cClearTimeThe last time when counters in this entry were cleared.
If the proxy device does not allow these counters to be
cleared, the timestamp should have a value of zero.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.17.1.1.1 |
cspPt1cFullHandShakeThe total number of TLS 1.0 full handshakes completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.17.1.1.2 |
cspPt1cResumedHandShakeThe total number of TLS 1.0 resumed handshakes
completed.ro Counter32 .1.3.6.1.4.1.9.9.370.1.17.1.1.3 |
cspPt1cHandShakeFailedThe total number of TLS 1.0 connections failed in
handshake phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.17.1.1.4 |
cspPt1cDataFailedThe total number of TLS 1.0 connections failed in
data phase.ro Counter32 .1.3.6.1.4.1.9.9.370.1.17.1.1.5 |
cspPt1cBadMacRcvdThe total number of received TLS 1.0 records
which have bad MAC (Message Authentication Code).ro Counter32 .1.3.6.1.4.1.9.9.370.1.17.1.1.6 |
cspPt1cPadErrorsThe total number of received TLS 1.0 records
which have pad errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.17.1.1.7 |
cspPt1cRSArc4128md5The total number of TLS 1.0 connections that used the
cipher suite RSA_WITH_RC4_128_MD5.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.17.1.1.8 |
cspPt1cRSArc4128shaThe total number of TLS 1.0 connections that used the
cipher suite RSA_WITH_RC4_128_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.17.1.1.9 |
cspPt1cRSAdescbcshaThe total number of TLS 1.0 connections that used the
cipher suite RSA_WITH_DES_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.17.1.1.10 |
cspPt1cRSA3desedecbcshaThe total number of TLS 1.0 connections that used the
cipher suite RSA_WITH_3DES_EDE_CBC_SHA.ro Counter32 UNITS "number of connections" .1.3.6.1.4.1.9.9.370.1.17.1.1.11 |
cspCpuStatusInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.18 |
cspCpuStatusTableA list of CPU status information entries. SEQUENCE OF CspCpuStatusEntry .1.3.6.1.4.1.9.9.370.1.18.1 |
cspCpuStatusEntryThe CPU status information entry. Each entry displays
the operational status and usage information about one
CPU on the proxy device. A proxy device can have one
or more CPU's. CspCpuStatusEntry .1.3.6.1.4.1.9.9.370.1.18.1.1 |
cspCpuNameThe unique name of a CPU on the proxy device. SnmpAdminString .1.3.6.1.4.1.9.9.370.1.18.1.1.1 |
cspCpuStatusThe operational status of the CPU.ro Enumeration .1.3.6.1.4.1.9.9.370.1.18.1.1.2 |
cspCpuClearTimeThe last time when the CPU counters were cleared.
If the proxy device does not allow these counters to be
cleared, the timestamp should have a value of zero.ro TimeStamp (SNMPv2-TC) .1.3.6.1.4.1.9.9.370.1.18.1.1.3 |
cspCpuProcessUtilThe percentage of CPU time utilized at process level.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.4 |
cspCpuInterruptUtilThe percentage of CPU time utilized at interrupt
level.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.5 |
cspCpuProcessUtilIn5SecThe percentage of CPU time utilized at process level
within the past five seconds.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.6 |
cspCpuProcessUtilIn1MinThe percentage of CPU time utilized at process level
within the past minute.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.7 |
cspCpuProcessUtilIn5MinThe percentage of CPU time utilized at process level
within the past five minutes.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.8 |
cspCpuInterruptUtilIn5SecThe percentage of CPU time utilized at interrupt level
within the past five seconds.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.9 |
cspCpuInterruptUtilIn1MinThe percentage of CPU time utilized at interrupt level
within the past minute.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.10 |
cspCpuInterruptUtilIn5MinThe percentage of CPU time utilized at interrupt level
within the past five minutes.ro Gauge32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.18.1.1.11 |
cspHttpHeaderInsertedInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.19 |
cspHttpHeaderInsertedSslInfoStats OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.19.1 |
cspNumOfSslInfoSuccessInsertedThis object represents the total number of times SSL
headers were successfully inserted. The number of
individual SSL session headers and SSL server header
within a SSL header insertion are not counted separately.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.1 |
cspNumOfSslInfoFailedInsertedThis object represents the number of failed
insertions of SSL information into HTTP headers.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.2 |
cspNumOfSpoofHttpHeaderDeletedThis object represents the number of times a header
in the incoming HTTP request was deleted because of
possible header spoofing.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.3 |
cspNumOfSslSessHeaderExtractedThis object represents the number of SSL session
headers extracted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.4 |
cspNumOfSslSessHeaderFailedExtractedThis object represents the number of SSL session
headers that failed to be extracted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.5 |
cspNumOfSslServerCertHeaderExtractedThis object represents the total number of SSL server
certificate headers extracted successfully.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.6 |
cspNumOfSslServerCerHeaderFailedExtractedThis object represents the number of SSL server
certificate headers that failed to be extracted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.7 |
cspNumOfTimesSslHeaderTruncatedThis object represents the number of times SSL
headers were truncated because the size of SSL data
inserted exceeds maximum length value.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.1.8 |
cspHttpHeaderInsertedSslClientCertStats OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.19.2 |
cspNumOfSslClientCertHeaderExtractedThis object represents the total number of SSL client
certificate headers extracted successfully.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.2.1 |
cspNumOfSslClientCertHeaderFailedExtractedThis object represents the number of SSL client
certificate headers that failed to be extracted.ro Counter32 .1.3.6.1.4.1.9.9.370.1.19.2.2 |
cspHttpRedirectInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.20 |
cspHttpRedirectClientCertAuthFailedStats OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.20.1 |
cspCertNotYetValidRedirectThis object represents the number of HTTP redirects
with reason client certificate is not valid yet.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.1 |
cspCertExpiredRedirectThis object represents the number of HTTP redirects
with reason expired client certificate.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.2 |
cspIssuerCertNotFoundRedirectThis object represents the number of HTTP redirects
because issuer certificate could not be found. This
occurs if the issuer certificate of an untrusted
certificate cannot be found.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.3 |
cspCertRevokedRedirectThis object represents the number of HTTP redirects
with reason revoked client certificate.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.4 |
cspNoClientCertSentRedirectThis object represents the number of HTTP redirects
with reason client certificate was not sent.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.5 |
cspNoCrlAvailableRedirectThis object represents the number of HTTP redirects
with reason no CRL available during revocation check.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.6 |
cspCrlExpiredRedirectThis object represents the number of HTTP redirects
with reason CRL expired during revocation check.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.7 |
cspCertSignatureFailedRedirectThis object represents the number of HTTP redirects
with reason invalid certificate signature.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.8 |
cspOtherCertErrorRedirectThis object represents the number of HTTP redirects
with reason other certificate errors.ro Counter32 .1.3.6.1.4.1.9.9.370.1.20.1.9 |
cspSslResourceNotifInfo OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.1.21 |
cspSslTrapTypeThis object indicates the type of trap issued by
cspSSLResourceLimitReached notification.ro Enumeration .1.3.6.1.4.1.9.9.370.1.21.1 |
cspSslMaxConnThis object specifies the maximum allowed SSL (SSLv3 and TLSv1)
connections per system as configured by the user.rw Unsigned32 UNITS "connections per system" .1.3.6.1.4.1.9.9.370.1.21.2 |
cspSslActiveConnThis object indicates the active SSL (SSLv3 and TLSv1)
connections per system.ro Gauge32 UNITS "connections per system" .1.3.6.1.4.1.9.9.370.1.21.3 |
cspSslConfigHighConnPcntThis object specifies the percentage of the maximum SSL
connections per system as configured by the user.rw Unsigned32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.21.4 |
cspSslActiveConnPcntThis object indicates the percentage of the active SSL
connections per system based on cspSslActiveConn. The
notification will be send when the cspSslActiveConnPcnt count
exceeds cspSslConfigHighConnPcnt.ro Unsigned32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.21.5 |
cspSslConfigWatermarkConnPcntThis object specifies the SSL connections watermark threshold
value (in percentage) per system allowed as configured by the user.
The value of cspSslConfigWatermarkPcnt should be less than
cspSslConfigHighConnPcnt.rw Unsigned32 UNITS "percentage" .1.3.6.1.4.1.9.9.370.1.21.6 |
cspMIBConformance OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.2 |
cspMIBCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.2.1 |
cspMIBGroups OBJECT IDENTIFIER .1.3.6.1.4.1.9.9.370.2.2 |