All MIBs › AVENTAIL-FIPS-MIBS
Organization: Aventail
Last Updated: 2004-09-07
Category: VPN and Security, Vendor: Aventail
Description: Manages FIPS 140-2 cryptographic module status and compliance validation on Aventail/SonicWall SSL VPN appliances.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is AVENTAIL-FIPS-MIBS?
AVENTAIL-FIPS-MIBS is a module from Aventail (later part of SonicWall) covering FIPS 140-2 cryptographic module status on SSL VPN appliances. It exposes FIPS-related hardware statistics, specifically the state of the FIPS crypto card and any smart card used for authentication, alongside a general gateway uptime object. This directly supports monitoring hardware and software status: fipsCardState and smartCardState reveal whether the cryptographic hardware is functioning and in compliant mode, while hsUptime tracks whether the gateway has stayed up without an unexpected reboot. Its scope is tied to the FIPS 140-2 validation standard and is used alongside Aventail's broader SSL VPN MIB set. It is deployed on SSL VPN gateways in regulated or government environments that require FIPS-validated cryptographic operation. Engineers can download the AVENTAIL-FIPS-MIBS file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in AVENTAIL-FIPS-MIBS. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Aventail/SonicWall SSL VPN appliances
Monitoring Examples
An administrator polls fipsCardState to confirm the FIPS crypto card is operating in compliant mode, checks smartCardState to verify smart-card authentication hardware is present and functional, and monitors hsUptime to confirm the VPN gateway has not rebooted unexpectedly. A fipsCardState transitioning to a fault or non-compliant value would indicate a crypto hardware failure requiring immediate attention in a regulated deployment.
What Can Be Monitored
- FIPS card state
- smart card state
- gateway uptime
Imported Objects
From AVENTAIL-MIB
| aventail | MODULE-IDENTITY |
From HOST-RESOURCES-MIB
| InternationalDisplayString |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
OIDs
RFC description
Vendor-private MIB for Aventail SSL VPN appliance FIPS compliance and security module management.
Start monitoring Aventail (SonicWall) SSL VPN appliances (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.