BLUECOAT-SG-AUTHENTICATION-MIB

All MIBs › BLUECOAT-SG-AUTHENTICATION-MIB

Organization: Blue Coat Systems, Inc.

Last Updated: 2014-08-06

Category: VPN and Security, Vendor: Blue Coat

Description: Manages authentication realm configuration and user session statistics on Blue Coat SG proxy appliances.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BLUECOAT-SG-AUTHENTICATION-MIB?

BLUECOAT-SG-AUTHENTICATION-MIB is a Blue Coat vendor MIB providing authentication realm information and statistics for ProxySG appliances, particularly for Windows-domain based authentication (secure channel/LSA). It exposes per-domain statistics such as transaction counts, timeouts, current and maximum waiters, and reset counts, along with domain controller connection stats. Its monitoring value is primarily software/service health: identifying whether authentication to a given Windows domain is timing out or backing up (high waiter counts), whether the secure channel to a domain controller has been reset frequently, and overall domain authentication throughput and status. It is inherently tied to Windows domain authentication infrastructure (NTLM/Kerberos via LSA/secure channel) rather than a generic IETF MIB, so its data is meaningful in conjunction with domain controller health. Deployment context is an enterprise ProxySG used as an authenticating web proxy in an Active Directory environment, where authentication latency or failures directly affect user web access. Engineers can download the BLUECOAT-SG-AUTHENTICATION-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in BLUECOAT-SG-AUTHENTICATION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Blue Coat ProxySG secure web gateway appliance

Monitoring Examples

An operator would poll schannelStatsTable/schannelStatsEntry per domainName to check domainStatus, timeouts, and currentWaiters versus maxWaiters, watching for waiter queues backing up which signals slow domain controller responses. A spike in resets recorded in lsaDomainControllerStatsTable alongside rising timeouts would point to a failing or unreachable domain controller. Comparing transactions across domains helps confirm load balancing across configured realms.

What Can Be Monitored

per-domain authentication transactions
authentication timeouts
current/max authentication waiters
secure channel reset counts
domain controller connection stats
domain authentication status

Imported Objects

From BLUECOAT-MIB

blueCoatMgmt

OBJECT-IDENTITY

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
bluecoatSGAuthentication	1.3.6.1.4.1.3417.2.15			The BLUECOAT-SG-AUTHENTICATION-MIB provides authentication information and statistics for a BlueCoat SG proxy appliance.
schannelStats	1.3.6.1.4.1.3417.2.15.2
schannelStatsTable	1.3.6.1.4.1.3417.2.15.2.1		not-accessible	This table lists the various statistics concerning the schannel.
schannelStatsEntry	1.3.6.1.4.1.3417.2.15.2.1.1		not-accessible	A schannelStats entry describes the present usage of a schannel.
I32 schannelStatsIndex	1.3.6.1.4.1.3417.2.15.2.1.1.1	Integer32	not-accessible	An arbitrary value which uniquely identifies a resource.
STR domainName	1.3.6.1.4.1.3417.2.15.2.1.1.2	DisplayString	read-only	The name of the domain.
STR domainStatus	1.3.6.1.4.1.3417.2.15.2.1.1.3	DisplayString	read-only	The status of the domain.
C32 timeouts	1.3.6.1.4.1.3417.2.15.2.1.1.4	Counter32	read-only	Number of Schannel timeouts.
C32 transactions	1.3.6.1.4.1.3417.2.15.2.1.1.5	Counter32	read-only	Number of Schannel transactions.
C32 currentWaiters	1.3.6.1.4.1.3417.2.15.2.1.1.6	Counter32	read-only	Number of current waiters.
C32 maxWaiters	1.3.6.1.4.1.3417.2.15.2.1.1.7	Counter32	read-only	Max number of waiters.
C32 resets	1.3.6.1.4.1.3417.2.15.2.1.1.8	Counter32	read-only	Number of schannel resets.
lsaDomainControllerStats	1.3.6.1.4.1.3417.2.15.3
lsaDomainControllerStatsTable	1.3.6.1.4.1.3417.2.15.3.1		not-accessible	This table lists the various lsa domain controller statistics.
lsaDomainControllerStatsEntry	1.3.6.1.4.1.3417.2.15.3.1.1		not-accessible	Describe statistics of Domain controllers.
I32 lsaDomainControllerStatsIndex	1.3.6.1.4.1.3417.2.15.3.1.1.1	Integer32	not-accessible	An arbitrary value which uniquely identifies a resource.
STR domainControllerName	1.3.6.1.4.1.3417.2.15.3.1.1.2	DisplayString	read-only	Name of domain controller.
STR address	1.3.6.1.4.1.3417.2.15.3.1.1.3	DisplayString	read-only	Adress of Domain Controller.
STR siteName	1.3.6.1.4.1.3417.2.15.3.1.1.4	DisplayString	read-only	Site name of domain controller.
C32 avgLDAPPingTime	1.3.6.1.4.1.3417.2.15.3.1.1.5	Counter32	read-only	Average LDAP ping time in milliseconds.
C32 lastLDAPPingTime	1.3.6.1.4.1.3417.2.15.3.1.1.6	Counter32	read-only	Last LDAP ping time in milliseconds.
STR flags	1.3.6.1.4.1.3417.2.15.3.1.1.7	DisplayString	read-only	Domain Controller flags.
schannelServerStats	1.3.6.1.4.1.3417.2.15.4
schannelServerStatsTable	1.3.6.1.4.1.3417.2.15.4.1		not-accessible	This table lists the various statistics concerning the schannel server.
schannelServerStatsEntry	1.3.6.1.4.1.3417.2.15.4.1.1		not-accessible	A schannelStats entry describes the present usage of a schannel server.
I32 schannelServerStatsIndex	1.3.6.1.4.1.3417.2.15.4.1.1.1	Integer32	not-accessible	An arbitrary value which uniquely identifies a resource.
STR serverName	1.3.6.1.4.1.3417.2.15.4.1.1.2	DisplayString	read-only	The status of the domain.
C32 connectionsInUse	1.3.6.1.4.1.3417.2.15.4.1.1.3	Counter32	read-only	Number of connections in use.
C32 availableConnections	1.3.6.1.4.1.3417.2.15.4.1.1.4	Counter32	read-only	Number of available connections.
C32 averageTransactions	1.3.6.1.4.1.3417.2.15.4.1.1.5	Counter32	read-only	Average transactions per second (last minute).
C32 authsByDomainLast1Minute	1.3.6.1.4.1.3417.2.15.4.1.1.6	Counter32	read-only	Auths by Domains Last 1 Minute.
C32 authsByDomainLast3Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.7	Counter32	read-only	Auths by Domains Last 3 Minutes.
C32 authsByDomainLast5Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.8	Counter32	read-only	Auths by Domains Last 5 Minutes.
C32 authsByDomainLast15Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.9	Counter32	read-only	Auths by Domains Last 15 Minutes.
C32 authsByDomainLast60Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.10	Counter32	read-only	Auths by Domains Last 60 Minutes.
C32 failedAuthsByDomainLast1Minute	1.3.6.1.4.1.3417.2.15.4.1.1.11	Counter32	read-only	Failed auths by Domains Last 1 Minute.
C32 failedAuthsByDomainLast3Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.12	Counter32	read-only	Failed auths by Domains Last 3 Minutes.
C32 failedAuthsByDomainLast5Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.13	Counter32	read-only	Failed auths by Domains Last 5 Minutes.
C32 failedAuthsByDomainLast15Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.14	Counter32	read-only	Failed auths by Domains Last 15 Minutes.
C32 failedAuthsByDomainLast60Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.15	Counter32	read-only	Failed auths by Domains Last 60 Minutes.
C32 avgLatencyPerDomainLast1Minute	1.3.6.1.4.1.3417.2.15.4.1.1.16	Counter32	read-only	Average Latency Per Domains Last 1 Minute.
C32 avgLatencyPerDomainLast3Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.17	Counter32	read-only	Average Latency Per Domain Last 3 Minutes.
C32 avgLatencyPerDomainLast5Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.18	Counter32	read-only	Average Latency Per Last 5 Minutes.
C32 avgLatencyPerDomainLast15Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.19	Counter32	read-only	Average Latency Per Domain Last 15 Minutes.
C32 avgLatencyPerDomainLast60Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.20	Counter32	read-only	Average Latency Per Domain Last 60 Minutes.
C32 maxLatencyPerDomainLast1Minute	1.3.6.1.4.1.3417.2.15.4.1.1.21	Counter32	read-only	Max Latency Per Domain Last 1 Minute.
C32 maxLatencyPerDomainLast3Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.22	Counter32	read-only	Max Latency Per Domains Last 3 Minutes.
C32 maxLatencyPerDomainLast5Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.23	Counter32	read-only	Max Latency Per Domains Last 5 Minutes.
C32 maxLatencyPerDomainLast15Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.24	Counter32	read-only	Max Latency Per Domains Last 15 Minutes.
C32 maxLatencyPerDomainLast60Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.25	Counter32	read-only	Max Latency Per Domains Last 60 Minutes.
C32 minLatencyPerDomainLast1Minute	1.3.6.1.4.1.3417.2.15.4.1.1.26	Counter32	read-only	Min Latency Per Domains Last 1 Minute.
C32 minLatencyPerDomainLast3Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.27	Counter32	read-only	Min Latency Per Domains Last 3 Minutes.
C32 minLatencyPerDomainLast5Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.28	Counter32	read-only	Min Latency Per Domains Last 5 Minutes.
C32 minLatencyPerDomainLast15Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.29	Counter32	read-only	Min Latency Per Domains Last 15 Minutes.
C32 minLatencyPerDomainLast60Minutes	1.3.6.1.4.1.3417.2.15.4.1.1.30	Counter32	read-only	Min Latency Per Domains Last 60 Minutes.
authNotifications	1.3.6.1.4.1.3417.2.15.5
authNotificationsPrefix	1.3.6.1.4.1.3417.2.15.5.0
NTF schannelLatencyTrap	1.3.6.1.4.1.3417.2.15.5.0.1			The domain that warrants a notification.

RFC description

Monitors authentication statistics for BlueCoat SG proxy including schannel, domain controller, and server connections.

Start monitoring Blue Coat secure web gateway appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BLUECOAT-SG-AUTHENTICATION-MIB

What Is BLUECOAT-SG-AUTHENTICATION-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description