BLUECOAT-SG-ATTACK-MIB

Description: Monitors detected network attack events and security threat statistics on Blue Coat SG proxy appliances.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

This proprietary MIB module belongs to Blue Coat Systems' SG series secure web proxy/gateway appliances, providing SNMP visibility into detected network attack activity. It exposes a table of discrete attack events, each carrying an index, attack name, status, and timestamp, effectively serving as a security-event log accessible via SNMP. It is primarily used to monitor the software/security status of the appliance by tracking whether protocol-level attacks (scans, floods, malformed traffic) have been detected and are currently active, rather than reporting hardware sensors like temperature or fans. Because it defines its own notification objects, it can operate largely standalone, though it is typically deployed alongside standard SNMPv2 trap infrastructure and the vendor's broader Blue Coat enterprise MIB tree. It is typically deployed in enterprise or service-provider environments where Blue Coat SG proxies sit at the network edge and security teams want automated alerting on attack detections. Engineers can download the BLUECOAT-SG-ATTACK-MIB file directly to load it into their MIB browser.

An administrator would poll deviceAttackTable/deviceAttackEntry, walking deviceAttackIndex to enumerate active or historical attack records, and reading deviceAttackName, deviceAttackStatus, and deviceAttackTime for each. A sudden appearance of new rows with deviceAttackStatus indicating an active attack and a recent deviceAttackTime would reveal an ongoing attack against the proxy, triggering deviceAttackMIBNotifications to alert operators in near real time. This gives security operations a lightweight way to detect attack bursts without parsing full appliance logs.

Monitors protocol-based attacks and security threats detected by Blue Coat appliances with status and timestamp information.