All MIBs › A3COM-HUAWEI-FIREWALL-MIB
Organization: Hangzhou H3C Tech. Co., Ltd.
Last Updated: 2008-01-17
Category: VPN and Security, Vendor: H3C/HH3C
Description: Monitors H3C firewall session tables, policy hit counters, and zone-based security statistics.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is A3COM-HUAWEI-FIREWALL-MIB?
The A3COM-HUAWEI-FIREWALL-MIB is an H3C-specific MIB for managing firewall products, exposing session-table capacity and utilization, policy-hit statistics, and zone-based security counters. It provides both configuration data such as maximum connection capacity and firewall specifications, and real-time performance/fault data such as current active connections and global statistics. Its central monitoring use case is tracking software/hardware load on the firewall's session table, comparing h3cFWConnNumCurr against h3cFWMaxConnNum to reveal whether the device is approaching session-table exhaustion, effectively a capacity/health check on the firewall's inspection engine. As a firewall-specific MIB it has no strong formal dependency on other standard MIBs, though it complements standard interface/TCP counters. It is deployed on H3C security appliances and firewall modules protecting data-center or campus network perimeters, where A3COM-HUAWEI-FIREWALL-MIB SNMP monitoring provides an early warning of session-table exhaustion.
IPNetwork Monitor allows you to monitor SNMP objects defined in A3COM-HUAWEI-FIREWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- H3C firewall appliance/security module
Monitoring Examples
Polling h3cFWConnNumCurr alongside h3cFWMaxConnNum lets an admin graph session-table utilization over time and alert before the firewall hits its connection ceiling, a condition that causes silent drops of new sessions during a traffic surge or SYN flood. h3cFirewallGlobalStats provides aggregate counters useful for confirming security policies are actively filtering traffic rather than passing it unfiltered.
What Can Be Monitored
- current vs maximum concurrent sessions
- global firewall statistics/policy hits
- firewall hardware specifications
- zone-based security counters
Imported Objects
From A3COM-HUAWEI-OID-MIB
| h3cCommon | OBJECT-IDENTITY |
From SNMPv2-SMI
| Gauge32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
How to Use in IPNetwork Monitor
Example using h3cFWConnNumCurr OID:
OIDs
RFC description
Firewall statistics and connection management for H3C/A3COM firewalls, tracking active connections and throughput.
Start monitoring H3C firewalls with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.