ASYNCOS-MAIL-MIB

All MIBs › ASYNCOS-MAIL-MIB

Organization: IronPort Systems

Last Updated: 2011-03-07

Category: Vendor: Cisco Devices

Description: Monitors Cisco IronPort email security appliances running AsyncOS, covering message queues, anti-spam/anti-virus counters, and mail flow rates.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is ASYNCOS-MAIL-MIB?

ASYNCOS-MAIL-MIB is a Cisco-proprietary MIB for monitoring Cisco IronPort Email Security Appliances running the AsyncOS operating system, covering mail gateway performance, resource utilization, and mail flow processing. It exposes system resource metrics (CPU, memory, and disk I/O utilization), queue-related counters (mail queue utilization and availability status), resource conservation reasons, and hardware component health such as power supply status and redundancy. This MIB is heavily oriented toward hardware and software status monitoring: administrators use it to track CPU/memory/disk load for capacity planning, watch mail queue backlogs that signal delivery problems, and monitor power supply status/redundancy to catch a failing or non-redundant power unit before it causes an outage. It is a self-contained Cisco enterprise MIB with no significant dependency on external IETF standards, complementing general system MIBs like HOST-RESOURCES-MIB conceptually. It is deployed on Cisco IronPort/Email Security Appliance hardware at the perimeter of an organization's mail infrastructure, where email flow, spam/AV processing load, and appliance health need continuous monitoring. Engineers can download the ASYNCOS-MAIL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in ASYNCOS-MAIL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco IronPort Email Security Appliance (ESA)

Monitoring Examples

An administrator would poll perCentCPUUtilization, perCentMemoryUtilization, and perCentDiskIOUtilization to track overall appliance load, alongside perCentQueueUtilization and queueAvailabilityStatus to detect a mail queue nearing capacity, which often signals a downstream delivery or DNS problem. The powerSupplyTable/powerSupplyEntry, indexed by powerSupplyIndex, exposes powerSupplyStatus and powerSupplyRedundancy so an operator can immediately see if one power supply has failed and the appliance is running without redundancy. A resourceConservationReason value combined with memoryAvailabilityStatus reporting constrained memory would indicate the appliance has entered a resource-conservation mode, typically deferring non-critical mail processing until load subsides.

What Can Be Monitored

CPU utilization
memory utilization
disk I/O utilization
mail queue utilization/availability
power supply status and redundancy
resource conservation state

Imported Objects

From IRONPORT-SMI

asyncOSMail

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TruthValue

How to Use in IPNetwork Monitor

Example using raidEvents OID:

Select a Cisco IronPort Email Security Appliance (ESA) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type raidEvents into the Find box to locate it in the OID tree, then select it and click OK. The total number of RAID events that have occurred since the last appliance power on event. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
asyncOSMailNotifications	1.3.6.1.4.1.15497.1.1.2
asyncOSMailObjects	1.3.6.1.4.1.15497.1.1.1			MIB for Cisco IronPort Mail Gateway/Email Security Appliances
STR connectionURL	1.3.6.1.4.1.15497.1.1.1.21	DisplayString	accessible-for-notify	The URL which will be used to test HTTP URL connectivity.
NTF connectivityFailure	1.3.6.1.4.1.15497.1.1.2.8			A connectivityFailure notification is sent when the URL denoted by configured connectionURL is unreachable, or the request returned an HTTP code was not between 200, inclusive, and 300, exclusive. The connectionURL configured is returned when the notification is triggered.
NTF cpuUtilizationExceeded	1.3.6.1.4.1.15497.1.1.2.10			A cpuUtilizationExceeded notification is sent when the value in perCentCPUUtilization has exceeded the configured CPU usage threshold. The percentage that exceeded the threshold in perCentCPUUtilization is returned via the notification.
I32 degreesCelsius	1.3.6.1.4.1.15497.1.1.1.9.1.2	Integer32	read-only	Temperature reading for the sensor being instrumented in Centrigrade units. This is correct according to the relative accuracy of the sensor being instrumented.
fanEntry	1.3.6.1.4.1.15497.1.1.1.10.1		not-accessible	An entry in the chassis fan table with the speed of a fan in the chassis, as well as the name of the corresponding fan.
NTF fanFailure	1.3.6.1.4.1.15497.1.1.2.4			A fanFailure notification is sent when the speed of the fan is not operating per the vendor defined specifications, as discussed in fanRPMs. This notification contains the opaque type for the fanName of the fan which has failed.
I32 fanIndex	1.3.6.1.4.1.15497.1.1.1.10.1.1	Integer32	not-accessible	Unique index of the chassis fan being instrumented. This index is for SNMP purposes only; it has no intrinsic value.
STR fanName	1.3.6.1.4.1.15497.1.1.1.10.1.3	DisplayString	read-only	A textual name of the chassis fan being instrumented.
G32 fanRPMs	1.3.6.1.4.1.15497.1.1.1.10.1.2	Gauge32	read-only	Speed in RPMs of a chassis fan being instrumented. The speed that corresponds to a fan failure varies depending on the vendor specification and airflow requirements for the appliance it's instrumented in, but in general when fanRPMs reports 0 RPMs the respective fan has failed.
fanTable	1.3.6.1.4.1.15497.1.1.1.10		not-accessible	A table of chassis fan entries.
NTF highTemperature	1.3.6.1.4.1.15497.1.1.2.3			A highTemperature notification is sent when the temperature of an instrumented sensor in the chassis has exceeded vendor defined specifications. This notification contains the opaque type for the temperatureName of the sensor which has failed.
STR hsmErrorReason	1.3.6.1.4.1.15497.1.1.1.22	DisplayString	read-only	A textual reason describing the last HSM authentication error.
NTF hsmInitializationFailure	1.3.6.1.4.1.15497.1.1.2.11			A hsmInitializationFailure notification is sent when the Hardware Security Module card cannot be initialized. The initialization error in hsmErrorReason is returned via the notification.
NTF hsmResetLoginFailure	1.3.6.1.4.1.15497.1.1.2.12			A hsmResetLoginFailure notification is sent when the Hardware Security Module card is reset due to multiple Crypto Officer login failures. The reset login error in hsmErrorReason is returned via the notification.
STR keyDescription	1.3.6.1.4.1.15497.1.1.1.12.1.2	DisplayString	read-only	Textual description for a Feature Key applicable to the appliance.
NTF keyExpiration	1.3.6.1.4.1.15497.1.1.2.5			A keyExpiration notification is sent when the corresponding Feature Key is pending expiration or has expired. This notification contains the opaque type for the keyDescription of the Feature Key that is pending expiration or has expired.
keyExpirationEntry	1.3.6.1.4.1.15497.1.1.1.12.1		not-accessible	Entry containing a Feature Key, its expiration status, and whether or not the Feature Key is perpetual.
I32 keyExpirationIndex	1.3.6.1.4.1.15497.1.1.1.12.1.1	Integer32	read-only	Unique index for a Feature Key applicable to the appliance. This index is for SNMP purposes only; it has no intrinsic value.
keyExpirationTable	1.3.6.1.4.1.15497.1.1.1.12		not-accessible	A table of Feature Key expiration entries.
T/F keyIsPerpetual	1.3.6.1.4.1.15497.1.1.1.12.1.3	TruthValue	read-only	Boolean value represented by True if Feature Key is perpetual, or False if the Feature Key is normal or expired.
G32 keySecondsUntilExpire	1.3.6.1.4.1.15497.1.1.1.12.1.4	Gauge32	read-only	Seconds until the valid Feature Key expires. Only applies to non-perpetual Feature Keys, and is 0 when the Feature Key has expired.
G32 mailTransferThreads	1.3.6.1.4.1.15497.1.1.1.20	Gauge32	read-only	Number of threads that perform some task related to transferring mail.
INT memoryAvailabilityStatus	1.3.6.1.4.1.15497.1.1.1.7	INTEGER	read-only	Mail Transfer process's memory availability status.
NTF memoryUtilizationExceeded	1.3.6.1.4.1.15497.1.1.2.9			A memoryUtilizationExceeded notification is sent when the value in perCentMemoryUtilization has exceeded the configured memory usage threshold. The percentage that exceeded the threshold in perCentMemoryUtilization is returned via the notification.
G32 oldestMessageAge	1.3.6.1.4.1.15497.1.1.1.14	Gauge32	read-only	The number of seconds the oldest message has been in queue
G32 openFilesOrSockets	1.3.6.1.4.1.15497.1.1.1.19	Gauge32	read-only	This object notes how many files or sockets are open on the appliance. In normal operating conditions, the measurement is taken at least once every 5-15 seconds.
G32 outstandingDNSRequests	1.3.6.1.4.1.15497.1.1.1.15	Gauge32	read-only	Number of DNS requests that have been sent but for which no reply has been received.
G32 pendingDNSRequests	1.3.6.1.4.1.15497.1.1.1.16	Gauge32	read-only	Number of DNS requests waiting to be sent.
I32 perCentCPUUtilization	1.3.6.1.4.1.15497.1.1.1.2	Integer32	read-only	This object provides a general idea of how busy the CPU is according to the appliance software, within the last 5 seconds of utilization. This measurement may or may not reflect the overall CPU utilization of the appliance, and may or may not be a per-process or a per-thread CPU utilization value.
I32 perCentDiskIOUtilization	1.3.6.1.4.1.15497.1.1.1.3	Integer32	read-only	This object provides a general idea of how much disk I/O has been generated within the last 5-15 seconds.
I32 perCentMemoryUtilization	1.3.6.1.4.1.15497.1.1.1.1	Integer32	read-only	This object provides a general idea of how much memory is being consumed by the appliance software.
I32 perCentQueueUtilization	1.3.6.1.4.1.15497.1.1.1.4	Integer32	read-only	Percent of total queue capacity used.
powerSupplyEntry	1.3.6.1.4.1.15497.1.1.1.8.1		not-accessible	Entry containing the status of a power supply and the corresponding power supply configuration redundancy state.
I32 powerSupplyIndex	1.3.6.1.4.1.15497.1.1.1.8.1.1	Integer32	read-only	Unique index for a power supply source. This index is for SNMP purposes only; it has no intrinsic value.
STR powerSupplyName	1.3.6.1.4.1.15497.1.1.1.8.1.4	DisplayString	read-only	A textual name for a power supply.
INT powerSupplyRedundancy	1.3.6.1.4.1.15497.1.1.1.8.1.3	INTEGER	read-only	Represents the status of a collection of one or more power supplies. powerSupplyRedundancyOK - All power supplies are in a powerSupplyHealthy state. powerSupplyRedundancyLost - One or more power supplies are in a powerSupplyNotInstalled, powerSupplyNoAC, or powerSupplyFaulty state.
INT powerSupplyStatus	1.3.6.1.4.1.15497.1.1.1.8.1.2	INTEGER	read-only	Represents the status of a power supply. powerSupplyNotInstalled - The power supply is not detected by the chassis as being physically present. powerSupplyHealthy - The power supply is physically present and is actively servicing the appliance with power. powerSupplyNoAC - The power supply is physically present but is not actively servicing the appliance with power. powerSupplyFaulty - The power supply is failed per the vendor defined operating specifications for the power supply.
NTF powerSupplyStatusChange	1.3.6.1.4.1.15497.1.1.2.2			A powerSupplyStatusChange notification is sent when power supply with powerSupplyName changes states, as per one of the states available in powerSupplyStatus. This notification contains the opaque type for powerSupplyName of the power supply which has changed state.
powerSupplyTable	1.3.6.1.4.1.15497.1.1.1.8		not-accessible	A table of one or power supply entries.
INT queueAvailabilityStatus	1.3.6.1.4.1.15497.1.1.1.5	INTEGER	read-only	Queue space status: enough space, queue near full or queue full.
raidEntry	1.3.6.1.4.1.15497.1.1.1.18.1		not-accessible	An entry in the RAID table representing the status of a drive attached to a RAID controller in the appliance.
C32 raidEventsEx	1.3.6.1.4.1.15497.1.1.1.17	Counter32	read-only	The total number of RAID events that have occurred since the last appliance power on event.
STR raidID	1.3.6.1.4.1.15497.1.1.1.18.1.3	DisplayString	read-only	A textual name for a drive attached to a RAID controller in the appliance.
I32 raidIndex	1.3.6.1.4.1.15497.1.1.1.18.1.1	Integer32	read-only	Unique index for a drive attached to a RAID controller in the appliance. This index is for SNMP purposes only; it has no intrinsic value.
STR raidLastError	1.3.6.1.4.1.15497.1.1.1.18.1.4	DisplayString	read-only	The textual description of the last error message reported by the RAID controller or corresponding driver if one has occurred. This is 'No Error' if the corresponding drive's state is driveHealthy, or a controller or driver defined specific textual description if the drive's state is not driveHealthy.
INT raidStatus	1.3.6.1.4.1.15497.1.1.1.18.1.2	INTEGER	read-only	Represents the status of a a drive attached to a RAID controller in the appliance. driveHealthy - The corresponding drive is connected to the RAID controller and functioning as a healthy member in the RAID volume. driveFailure - The drive is either disconnected from the RAID controller, or has failed to operate within thresholds defined in vendor specifications for the drive and the controller. driveRebuild - The corresponding drive is connected to the RAID controller. It is being rebuilt according to the RAID controller specific rebuild algorithm for the current operating mode of the RAID volume.
NTF raidStatusChange	1.3.6.1.4.1.15497.1.1.2.7			A raidStatusChange notification is sent when drive with raidID changes states, as per one of the states available in raidStatus. This notification contains the opaque type for raidID of the drive which has changed state.
raidTable	1.3.6.1.4.1.15497.1.1.1.18		not-accessible	Unique index for a drive being instrumented in the appliance. This index is for SNMP purposes only; it has no intrinsic value.
NTF resourceConservationMode	1.3.6.1.4.1.15497.1.1.2.1			Memory or queue utilization caused system to enter resource conservation mode.
INT resourceConservationReason	1.3.6.1.4.1.15497.1.1.1.6	INTEGER	read-only	Reason system is in Resource Conservation Mode.
temperatureEntry	1.3.6.1.4.1.15497.1.1.1.9.1		not-accessible	An entry in the temperature sensor table representing the status of the corresponding sensor in or on the appliance.
I32 temperatureIndex	1.3.6.1.4.1.15497.1.1.1.9.1.1	Integer32	not-accessible	Unique index for the temperature sensor being instrumented. This index is for SNMP purposes only; it has no intrinsic value.
STR temperatureName	1.3.6.1.4.1.15497.1.1.1.9.1.3	DisplayString	read-only	Textual description for sensor being instrumented. This description is a short textual label, suitable as a human-sensible identification for the rest of the information in the entry.
temperatureTable	1.3.6.1.4.1.15497.1.1.1.9		not-accessible	A table of chassis temperature sensor states.
updateEntry	1.3.6.1.4.1.15497.1.1.1.13.1		not-accessible	Entry containing a name and number of successful and failed updates for a service, including but not limited to: spam or virus definitions and timezone updates.
NTF updateFailure	1.3.6.1.4.1.15497.1.1.2.6			An updateFailure notification is sent when a service fails to update properly. This notification contains the opaque type for the updateServiceName of the update service that has failed.
C32 updateFailures	1.3.6.1.4.1.15497.1.1.1.13.1.4	Counter32	read-only	The number of failed attempts that have occurred when updating a service.
I32 updateIndex	1.3.6.1.4.1.15497.1.1.1.13.1.1	Integer32	read-only	Unique index for an update service. This index is for SNMP purposes only; it has no intrinsic value.
C32 updates	1.3.6.1.4.1.15497.1.1.1.13.1.3	Counter32	read-only	The number of successful attempts that have occurred when updating a service.
STR updateServiceName	1.3.6.1.4.1.15497.1.1.1.13.1.2	DisplayString	read-only	A textual name for an update entry.
updateTable	1.3.6.1.4.1.15497.1.1.1.13		not-accessible	A table of one or more update entries.
G32 workQueueMessages	1.3.6.1.4.1.15497.1.1.1.11	Gauge32	read-only	Number of messages in the work queue.

RFC description

MIB for Cisco IronPort mail and email security appliances including memory and CPU utilization metrics.

Start monitoring Cisco IronPort Email Security Appliance (ESA) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download ASYNCOS-MAIL-MIB