ASTARO-MIB

Description: Monitors Astaro (Sophos) UTM security appliances, reporting firewall policy counters, VPN tunnel status, and threat detection statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

ASTARO-MIB is a vendor-specific MIB from Sophos (formerly Astaro) covering its UTM (Unified Threat Management) security appliances. It is structured almost entirely around SNMP notification/trap definitions rather than polled data tables, organizing alerts into severity-based groups such as debug, info, warn, and crit. Its role in monitoring is squarely on the software/event side: it lets an administrator receive real-time notifications about firewall policy violations, VPN tunnel state changes, and detected security threats rather than exposing continuous performance counters. It has no explicit dependency on other MIBs beyond standard SNMPv2 notification conventions. It is deployed wherever Sophos/Astaro UTM firewalls guard a network perimeter and need to forward security events to an SNMP trap receiver or SIEM. Engineers can download the ASTARO-MIB file directly to load it into their MIB browser.

A monitoring system would subscribe to traps under the notification/notificationGroup hierarchy and filter by severity level (e.g., crit vs warn) to trigger alerts only for serious events like VPN tunnel failures or intrusion detections. Because the MIB is primarily notification-oriented rather than table-based, there is limited value in periodic polling; the realistic scenario is a trap receiver logging and escalating crit-level Astaro events for incident response. An anomaly such as a burst of crit notifications would indicate an active attack or firewall policy breach requiring investigation.

Vendor-private Astaro MIB for security appliance management; defines objects for monitoring Astaro firewall, VPN, and intrusion detection systems.