CHECKPOINT-MIB-2

All MIBs › CHECKPOINT-MIB-2

Category: VPN and Security, Vendor: Check Point

Description: Extends Check Point firewall management with additional objects for advanced threat prevention and security blade status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CHECKPOINT-MIB-2?

CHECKPOINT-MIB-2 is a vendor-specific extension to Check Point's firewall management MIB set, adding objects for advanced threat prevention features and security 'blade' (software module) status on Check Point security gateways. Based on its stated scope, it would expose the enabled/operational status of individual security blades (e.g., threat prevention, IPS, antivirus) and related threat-prevention statistics or configuration. This is directly relevant to monitoring software status on the device: administrators can check whether specific security blades are running versus disabled or faulted, which is critical for confirming that threat-prevention protections are actually active. It extends the base CHECKPOINT-MIB and depends on it for foundational firewall objects (system, interfaces, connections), so it is normally deployed together with that core module. It is used on Check Point security gateway/firewall appliances in enterprise and data-center perimeter security deployments, where administrators reference the CHECKPOINT-MIB-2 MIB to identify the specific blade-status objects to poll.

IPNetwork Monitor allows you to monitor SNMP objects defined in CHECKPOINT-MIB-2. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Check Point security gateway/firewall appliance

Monitoring Examples

No object or table names were extracted for this MIB (sample_objects is empty), so specific OIDs cannot be cited with confidence; conceptually, an administrator would poll per-blade status objects to confirm whether the threat-prevention or IPS blade on a given gateway is enabled and running versus disabled, which would explain a sudden gap in threat detection/blocking.

What Can Be Monitored

security blade enabled/operational status
threat prevention blade state
advanced threat prevention statistics

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC1155-SMI

Counter
Gauge
IpAddress
NetworkAddress
TimeTicks
enterprises
mgmt

OIDs

OID symbolic	OID numeric	Type	Access	Description
at	1.3.6.1.2.1.3
atEntry	1.3.6.1.2.1.3.1.1		not-accessible	Each entry contains one NetworkAddress to `physical' address equivalence.
INT atIfIndex	1.3.6.1.2.1.3.1.1.1	INTEGER	read-write	The interface on which this entry's equivalence is effective. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.
IP atNetAddress	1.3.6.1.2.1.3.1.1.3	IpAddress	read-write	The NetworkAddress (e.g., the IP address) corresponding to the media-dependent `physical' address.
PHY atPhysAddress	1.3.6.1.2.1.3.1.1.2	PhysAddress	read-write	The media-dependent `physical' address. Setting this object to a null string (one of zero length) has the effect of invaliding the corresponding entry in the atTable object. That is, it effectively dissasociates the interface identified with said entry from the mapping identified with said entry. It is an implementation-specific matter as to whether the agent removes an invalidated entry from the table. Accordingly, management stations must be prepared to receive tabular information from agents that corresponds to entries not currently in use. Proper interpretation of such entries requires examination of the relevant atPhysAddress object.
atTable	1.3.6.1.2.1.3.1		not-accessible	The Address Translation tables contain the NetworkAddress to `physical' address equivalences. Some interfaces do not use translation tables for determining address equivalences (e.g., DDN-X.25 has an algorithmic method); if all interfaces are of this type, then the Address Translation table is empty, i.e., has zero entries.
checkpoint	1.3.6.1.4.1.1919
egp	1.3.6.1.2.1.8
INT egpAs	1.3.6.1.2.1.8.6	INTEGER	read-only	The autonomous system number of this EGP entity.
CTR egpInErrors	1.3.6.1.2.1.8.2	Counter	read-only	The number of EGP messages received that proved to be in error.
CTR egpInMsgs	1.3.6.1.2.1.8.1	Counter	read-only	The number of EGP messages received without error.
IP egpNeighAddr	1.3.6.1.2.1.8.5.1.2	IpAddress	read-only	The IP address of this entry's EGP neighbor.
INT egpNeighAs	1.3.6.1.2.1.8.5.1.3	INTEGER	read-only	The autonomous system of this EGP peer. Zero should be specified if the autonomous system number of the neighbor is not yet known.
egpNeighEntry	1.3.6.1.2.1.8.5.1		not-accessible	Information about this entity's relationship with a particular EGP neighbor.
INT egpNeighEventTrigger	1.3.6.1.2.1.8.5.1.15	INTEGER	read-write	A control variable used to trigger operator- initiated Start and Stop events. When read, this variable always returns the most recent value that egpNeighEventTrigger was set to. If it has not been set since the last initialization of the network management subsystem on the node, it returns a value of `stop'. When set, this variable causes a Start or Stop event on the specified neighbor, as specified on pages 8-10 of RFC 904. Briefly, a Start event causes an Idle peer to begin neighbor acquisition and a non-Idle peer to reinitiate neighbor acquisition. A stop event causes a non-Idle peer to return to the Idle state until a Start event occurs, either via egpNeighEventTrigger or otherwise.
CTR egpNeighInErrMsgs	1.3.6.1.2.1.8.5.1.8	Counter	read-only	The number of EGP-defined error messages received from this EGP peer.
CTR egpNeighInErrs	1.3.6.1.2.1.8.5.1.5	Counter	read-only	The number of EGP messages received from this EGP peer that proved to be in error (e.g., bad EGP checksum).
CTR egpNeighInMsgs	1.3.6.1.2.1.8.5.1.4	Counter	read-only	The number of EGP messages received without error from this EGP peer.
INT egpNeighIntervalHello	1.3.6.1.2.1.8.5.1.12	INTEGER	read-only	The interval between EGP Hello command retransmissions (in hundredths of a second). This represents the t1 timer as defined in RFC 904.
INT egpNeighIntervalPoll	1.3.6.1.2.1.8.5.1.13	INTEGER	read-only	The interval between EGP poll command retransmissions (in hundredths of a second). This represents the t3 timer as defined in RFC 904.
INT egpNeighMode	1.3.6.1.2.1.8.5.1.14	INTEGER	read-only	The polling mode of this EGP entity, either passive or active.
CTR egpNeighOutErrMsgs	1.3.6.1.2.1.8.5.1.9	Counter	read-only	The number of EGP-defined error messages sent to this EGP peer.
CTR egpNeighOutErrs	1.3.6.1.2.1.8.5.1.7	Counter	read-only	The number of locally generated EGP messages not sent to this EGP peer due to resource limitations within an EGP entity.
CTR egpNeighOutMsgs	1.3.6.1.2.1.8.5.1.6	Counter	read-only	The number of locally generated EGP messages to this EGP peer.
INT egpNeighState	1.3.6.1.2.1.8.5.1.1	INTEGER	read-only	The EGP state of the local system with respect to this entry's EGP neighbor. Each EGP state is represented by a value that is one greater than the numerical value associated with said state in RFC 904.
CTR egpNeighStateDowns	1.3.6.1.2.1.8.5.1.11	Counter	read-only	The number of EGP state transitions from the UP state to any other state with this EGP peer.
CTR egpNeighStateUps	1.3.6.1.2.1.8.5.1.10	Counter	read-only	The number of EGP state transitions to the UP state with this EGP peer.
egpNeighTable	1.3.6.1.2.1.8.5		not-accessible	The EGP neighbor table.
CTR egpOutErrors	1.3.6.1.2.1.8.4	Counter	read-only	The number of locally generated EGP messages not sent due to resource limitations within an EGP entity.
CTR egpOutMsgs	1.3.6.1.2.1.8.3	Counter	read-only	The total number of locally generated EGP messages.
fw	1.3.6.1.4.1.1919.1.1
INT fwAccepted	1.3.6.1.4.1.1919.1.1.4	INTEGER	read-only	The number of accepted packets.
INT fwDropped	1.3.6.1.4.1.1919.1.1.6	INTEGER	read-only	The number of dropped packets.
STR fwEvent	1.3.6.1.4.1.1919.1.1.11	DisplayString	read-only	A string containing the last snmp trap sent via fw
STR fwFilterDate	1.3.6.1.4.1.1919.1.1.3	DisplayString	read-only	When was the filter installed (STRING!)
STR fwFilterName	1.3.6.1.4.1.1919.1.1.2	DisplayString	read-only	The name of the loaded filter.
INT fwLogged	1.3.6.1.4.1.1919.1.1.7	INTEGER	read-only	The number of logged packets.
INT fwMajor	1.3.6.1.4.1.1919.1.1.8	INTEGER	read-only	FireWall-1 Major Version.
INT fwMinor	1.3.6.1.4.1.1919.1.1.9	INTEGER	read-only	FireWall-1 Minor Version.
STR fwModuleState	1.3.6.1.4.1.1919.1.1.1	DisplayString	read-only	The state of the fw module.
INT fwProduct	1.3.6.1.4.1.1919.1.1.10	INTEGER	read-only	FireWall-1 Product.
INT fwRejected	1.3.6.1.4.1.1919.1.1.5	INTEGER	read-only	The number of rejected packets.
icmp	1.3.6.1.2.1.5
CTR icmpInAddrMaskReps	1.3.6.1.2.1.5.13	Counter	read-only	The number of ICMP Address Mask Reply messages received.
CTR icmpInAddrMasks	1.3.6.1.2.1.5.12	Counter	read-only	The number of ICMP Address Mask Request messages received.
CTR icmpInDestUnreachs	1.3.6.1.2.1.5.3	Counter	read-only	The number of ICMP Destination Unreachable messages received.
CTR icmpInEchoReps	1.3.6.1.2.1.5.9	Counter	read-only	The number of ICMP Echo Reply messages received.
CTR icmpInEchos	1.3.6.1.2.1.5.8	Counter	read-only	The number of ICMP Echo (request) messages received.
CTR icmpInErrors	1.3.6.1.2.1.5.2	Counter	read-only	The number of ICMP messages which the entity received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, etc.).
CTR icmpInMsgs	1.3.6.1.2.1.5.1	Counter	read-only	The total number of ICMP messages which the entity received. Note that this counter includes all those counted by icmpInErrors.
CTR icmpInParmProbs	1.3.6.1.2.1.5.5	Counter	read-only	The number of ICMP Parameter Problem messages received.
CTR icmpInRedirects	1.3.6.1.2.1.5.7	Counter	read-only	The number of ICMP Redirect messages received.
CTR icmpInSrcQuenchs	1.3.6.1.2.1.5.6	Counter	read-only	The number of ICMP Source Quench messages received.
CTR icmpInTimeExcds	1.3.6.1.2.1.5.4	Counter	read-only	The number of ICMP Time Exceeded messages received.
CTR icmpInTimestampReps	1.3.6.1.2.1.5.11	Counter	read-only	The number of ICMP Timestamp Reply messages received.
CTR icmpInTimestamps	1.3.6.1.2.1.5.10	Counter	read-only	The number of ICMP Timestamp (request) messages received.
CTR icmpOutAddrMaskReps	1.3.6.1.2.1.5.26	Counter	read-only	The number of ICMP Address Mask Reply messages sent.
CTR icmpOutAddrMasks	1.3.6.1.2.1.5.25	Counter	read-only	The number of ICMP Address Mask Request messages sent.
CTR icmpOutDestUnreachs	1.3.6.1.2.1.5.16	Counter	read-only	The number of ICMP Destination Unreachable messages sent.
CTR icmpOutEchoReps	1.3.6.1.2.1.5.22	Counter	read-only	The number of ICMP Echo Reply messages sent.
CTR icmpOutEchos	1.3.6.1.2.1.5.21	Counter	read-only	The number of ICMP Echo (request) messages sent.
CTR icmpOutErrors	1.3.6.1.2.1.5.15	Counter	read-only	The number of ICMP messages which this entity did not send due to problems discovered within ICMP such as a lack of buffers. This value should not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram. In some implementations there may be no types of error which contribute to this counter's value.
CTR icmpOutMsgs	1.3.6.1.2.1.5.14	Counter	read-only	The total number of ICMP messages which this entity attempted to send. Note that this counter includes all those counted by icmpOutErrors.
CTR icmpOutParmProbs	1.3.6.1.2.1.5.18	Counter	read-only	The number of ICMP Parameter Problem messages sent.
CTR icmpOutRedirects	1.3.6.1.2.1.5.20	Counter	read-only	The number of ICMP Redirect messages sent. For a host, this object will always be zero, since hosts do not send redirects.
CTR icmpOutSrcQuenchs	1.3.6.1.2.1.5.19	Counter	read-only	The number of ICMP Source Quench messages sent.
CTR icmpOutTimeExcds	1.3.6.1.2.1.5.17	Counter	read-only	The number of ICMP Time Exceeded messages sent.
CTR icmpOutTimestampReps	1.3.6.1.2.1.5.24	Counter	read-only	The number of ICMP Timestamp Reply messages sent.
CTR icmpOutTimestamps	1.3.6.1.2.1.5.23	Counter	read-only	The number of ICMP Timestamp (request) messages sent.
INT ifAdminStatus	1.3.6.1.2.1.2.2.1.7	INTEGER	read-write	The desired state of the interface. The testing(3) state indicates that no operational packets can be passed.
STR ifDescr	1.3.6.1.2.1.2.2.1.2	DisplayString	read-only	A textual string containing information about the interface. This string should include the name of the manufacturer, the product name and the version of the hardware interface.
ifEntry	1.3.6.1.2.1.2.2.1		not-accessible	An interface entry containing objects at the subnetwork layer and below for a particular interface.
INT ifIndex	1.3.6.1.2.1.2.2.1.1	INTEGER	read-only	A unique value for each interface. Its value ranges between 1 and the value of ifNumber. The value for each interface must remain constant at least from one re-initialization of the entity's network management system to the next re- initialization.
CTR ifInDiscards	1.3.6.1.2.1.2.2.1.13	Counter	read-only	The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space.
CTR ifInErrors	1.3.6.1.2.1.2.2.1.14	Counter	read-only	The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
CTR ifInNUcastPkts	1.3.6.1.2.1.2.2.1.12	Counter	read-only	The number of non-unicast (i.e., subnetwork- broadcast or subnetwork-multicast) packets delivered to a higher-layer protocol.
CTR ifInOctets	1.3.6.1.2.1.2.2.1.10	Counter	read-only	The total number of octets received on the interface, including framing characters.
CTR ifInUcastPkts	1.3.6.1.2.1.2.2.1.11	Counter	read-only	The number of subnetwork-unicast packets delivered to a higher-layer protocol.
CTR ifInUnknownProtos	1.3.6.1.2.1.2.2.1.15	Counter	read-only	The number of packets received via the interface which were discarded because of an unknown or unsupported protocol.
TIK ifLastChange	1.3.6.1.2.1.2.2.1.9	TimeTicks	read-only	The value of sysUpTime at the time the interface entered its current operational state. If the current state was entered prior to the last re- initialization of the local network management subsystem, then this object contains a zero value.
INT ifMtu	1.3.6.1.2.1.2.2.1.4	INTEGER	read-only	The size of the largest datagram which can be sent/received on the interface, specified in octets. For interfaces that are used for transmitting network datagrams, this is the size of the largest network datagram that can be sent on the interface.
INT ifNumber	1.3.6.1.2.1.2.1	INTEGER	read-only	The number of network interfaces (regardless of their current state) present on this system.
INT ifOperStatus	1.3.6.1.2.1.2.2.1.8	INTEGER	read-only	The current operational state of the interface. The testing(3) state indicates that no operational packets can be passed.
CTR ifOutDiscards	1.3.6.1.2.1.2.2.1.19	Counter	read-only	The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being transmitted. One possible reason for discarding such a packet could be to free up buffer space.
CTR ifOutErrors	1.3.6.1.2.1.2.2.1.20	Counter	read-only	The number of outbound packets that could not be transmitted because of errors.
CTR ifOutNUcastPkts	1.3.6.1.2.1.2.2.1.18	Counter	read-only	The total number of packets that higher-level protocols requested be transmitted to a non- unicast (i.e., a subnetwork-broadcast or subnetwork-multicast) address, including those that were discarded or not sent.
CTR ifOutOctets	1.3.6.1.2.1.2.2.1.16	Counter	read-only	The total number of octets transmitted out of the interface, including framing characters.
GAU ifOutQLen	1.3.6.1.2.1.2.2.1.21	Gauge	read-only	The length of the output packet queue (in packets).
CTR ifOutUcastPkts	1.3.6.1.2.1.2.2.1.17	Counter	read-only	The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent.
PHY ifPhysAddress	1.3.6.1.2.1.2.2.1.6	PhysAddress	read-only	The interface's address at the protocol layer immediately `below' the network layer in the protocol stack. For interfaces which do not have such an address (e.g., a serial line), this object should contain an octet string of zero length.
OID ifSpecific	1.3.6.1.2.1.2.2.1.22	OBJECT IDENTIFIER	read-only	A reference to MIB definitions specific to the particular media being used to realize the interface. For example, if the interface is realized by an ethernet, then the value of this object refers to a document defining objects specific to ethernet. If this information is not present, its value should be set to the OBJECT IDENTIFIER { 0 0 }, which is a syntatically valid object identifier, and any conformant implementation of ASN.1 and BER must be able to generate and recognize this value.
GAU ifSpeed	1.3.6.1.2.1.2.2.1.5	Gauge	read-only	An estimate of the interface's current bandwidth in bits per second. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth.
ifTable	1.3.6.1.2.1.2.2		not-accessible	A list of interface entries. The number of entries is given by the value of ifNumber.
INT ifType	1.3.6.1.2.1.2.2.1.3	INTEGER	read-only	The type of interface, distinguished according to the physical/link protocol(s) immediately `below' the network layer in the protocol stack.
interfaces	1.3.6.1.2.1.2
ip	1.3.6.1.2.1.4
ipAddrEntry	1.3.6.1.2.1.4.20.1		not-accessible	The addressing information for one of this entity's IP addresses.
ipAddrTable	1.3.6.1.2.1.4.20		not-accessible	The table of addressing information relevant to this entity's IP addresses.
IP ipAdEntAddr	1.3.6.1.2.1.4.20.1.1	IpAddress	read-only	The IP address to which this entry's addressing information pertains.
INT ipAdEntBcastAddr	1.3.6.1.2.1.4.20.1.4	INTEGER	read-only	The value of the least-significant bit in the IP broadcast address used for sending datagrams on the (logical) interface associated with the IP address of this entry. For example, when the Internet standard all-ones broadcast address is used, the value will be 1. This value applies to both the subnet and network broadcasts addresses used by the entity on this (logical) interface.
INT ipAdEntIfIndex	1.3.6.1.2.1.4.20.1.2	INTEGER	read-only	The index value which uniquely identifies the interface to which this entry is applicable. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.
IP ipAdEntNetMask	1.3.6.1.2.1.4.20.1.3	IpAddress	read-only	The subnet mask associated with the IP address of this entry. The value of the mask is an IP address with all the network bits set to 1 and all the hosts bits set to 0.
INT ipAdEntReasmMaxSize	1.3.6.1.2.1.4.20.1.5	INTEGER	read-only	The size of the largest IP datagram which this entity can re-assemble from incoming IP fragmented datagrams received on this interface.
INT ipDefaultTTL	1.3.6.1.2.1.4.2	INTEGER	read-write	The default value inserted into the Time-To-Live field of the IP header of datagrams originated at this entity, whenever a TTL value is not supplied by the transport layer protocol.
INT ipForwarding	1.3.6.1.2.1.4.1	INTEGER	read-write	The indication of whether this entity is acting as an IP gateway in respect to the forwarding of datagrams received by, but not addressed to, this entity. IP gateways forward datagrams. IP hosts do not (except those source-routed via the host). Note that for some managed nodes, this object may take on only a subset of the values possible. Accordingly, it is appropriate for an agent to return a `badValue' response if a management station attempts to change this object to an inappropriate value.
CTR ipForwDatagrams	1.3.6.1.2.1.4.6	Counter	read-only	The number of input datagrams for which this entity was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination. In entities which do not act as IP Gateways, this counter will include only those packets which were Source-Routed via this entity, and the Source- Route option processing was successful.
CTR ipFragCreates	1.3.6.1.2.1.4.19	Counter	read-only	The number of IP datagram fragments that have been generated as a result of fragmentation at this entity.
CTR ipFragFails	1.3.6.1.2.1.4.18	Counter	read-only	The number of IP datagrams that have been discarded because they needed to be fragmented at this entity but could not be, e.g., because their Don't Fragment flag was set.
CTR ipFragOKs	1.3.6.1.2.1.4.17	Counter	read-only	The number of IP datagrams that have been successfully fragmented at this entity.
CTR ipInAddrErrors	1.3.6.1.2.1.4.5	Counter	read-only	The number of input datagrams discarded because the IP address in their IP header's destination field was not a valid address to be received at this entity. This count includes invalid addresses (e.g., 0.0.0.0) and addresses of unsupported Classes (e.g., Class E). For entities which are not IP Gateways and therefore do not forward datagrams, this counter includes datagrams discarded because the destination address was not a local address.
CTR ipInDelivers	1.3.6.1.2.1.4.9	Counter	read-only	The total number of input datagrams successfully delivered to IP user-protocols (including ICMP).
CTR ipInDiscards	1.3.6.1.2.1.4.8	Counter	read-only	The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but which were discarded (e.g., for lack of buffer space). Note that this counter does not include any datagrams discarded while awaiting re-assembly.
CTR ipInHdrErrors	1.3.6.1.2.1.4.4	Counter	read-only	The number of input datagrams discarded due to errors in their IP headers, including bad checksums, version number mismatch, other format errors, time-to-live exceeded, errors discovered in processing their IP options, etc.
CTR ipInReceives	1.3.6.1.2.1.4.3	Counter	read-only	The total number of input datagrams received from interfaces, including those received in error.
CTR ipInUnknownProtos	1.3.6.1.2.1.4.7	Counter	read-only	The number of locally-addressed datagrams received successfully but discarded because of an unknown or unsupported protocol.
ipNetToMediaEntry	1.3.6.1.2.1.4.22.1		not-accessible	Each entry contains one IpAddress to `physical' address equivalence.
INT ipNetToMediaIfIndex	1.3.6.1.2.1.4.22.1.1	INTEGER	read-write	The interface on which this entry's equivalence is effective. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.
IP ipNetToMediaNetAddress	1.3.6.1.2.1.4.22.1.3	IpAddress	read-write	The IpAddress corresponding to the media- dependent `physical' address.
PHY ipNetToMediaPhysAddress	1.3.6.1.2.1.4.22.1.2	PhysAddress	read-write	The media-dependent `physical' address.
ipNetToMediaTable	1.3.6.1.2.1.4.22		not-accessible	The IP Address Translation table used for mapping from IP addresses to physical addresses.
INT ipNetToMediaType	1.3.6.1.2.1.4.22.1.4	INTEGER	read-write	The type of mapping. Setting this object to the value invalid(2) has the effect of invalidating the corresponding entry in the ipNetToMediaTable. That is, it effectively dissasociates the interface identified with said entry from the mapping identified with said entry. It is an implementation-specific matter as to whether the agent removes an invalidated entry from the table. Accordingly, management stations must be prepared to receive tabular information from agents that corresponds to entries not currently in use. Proper interpretation of such entries requires examination of the relevant ipNetToMediaType object.
CTR ipOutDiscards	1.3.6.1.2.1.4.11	Counter	read-only	The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but which were discarded (e.g., for lack of buffer space). Note that this counter would include datagrams counted in ipForwDatagrams if any such packets met this (discretionary) discard criterion.
CTR ipOutNoRoutes	1.3.6.1.2.1.4.12	Counter	read-only	The number of IP datagrams discarded because no route could be found to transmit them to their destination. Note that this counter includes any packets counted in ipForwDatagrams which meet this `no-route' criterion. Note that this includes any datagarms which a host cannot route because all of its default gateways are down.
CTR ipOutRequests	1.3.6.1.2.1.4.10	Counter	read-only	The total number of IP datagrams which local IP user-protocols (including ICMP) supplied to IP in requests for transmission. Note that this counter does not include any datagrams counted in ipForwDatagrams.
CTR ipReasmFails	1.3.6.1.2.1.4.16	Counter	read-only	The number of failures detected by the IP re- assembly algorithm (for whatever reason: timed out, errors, etc). Note that this is not necessarily a count of discarded IP fragments since some algorithms (notably the algorithm in RFC 815) can lose track of the number of fragments by combining them as they are received.
CTR ipReasmOKs	1.3.6.1.2.1.4.15	Counter	read-only	The number of IP datagrams successfully re- assembled.
CTR ipReasmReqds	1.3.6.1.2.1.4.14	Counter	read-only	The number of IP fragments received which needed to be reassembled at this entity.
INT ipReasmTimeout	1.3.6.1.2.1.4.13	INTEGER	read-only	The maximum number of seconds which received fragments are held while they are awaiting reassembly at this entity.
INT ipRouteAge	1.3.6.1.2.1.4.21.1.10	INTEGER	read-write	The number of seconds since this route was last updated or otherwise determined to be correct. Note that no semantics of `too old' can be implied except through knowledge of the routing protocol by which the route was learned.
IP ipRouteDest	1.3.6.1.2.1.4.21.1.1	IpAddress	read-write	The destination IP address of this route. An entry with a value of 0.0.0.0 is considered a default route. Multiple routes to a single destination can appear in the table, but access to such multiple entries is dependent on the table- access mechanisms defined by the network management protocol in use.
ipRouteEntry	1.3.6.1.2.1.4.21.1		not-accessible	A route to a particular destination.
INT ipRouteIfIndex	1.3.6.1.2.1.4.21.1.2	INTEGER	read-write	The index value which uniquely identifies the local interface through which the next hop of this route should be reached. The interface identified by a particular value of this index is the same interface as identified by the same value of ifIndex.
OID ipRouteInfo	1.3.6.1.2.1.4.21.1.13	OBJECT IDENTIFIER	read-only	A reference to MIB definitions specific to the particular routing protocol which is responsible for this route, as determined by the value specified in the route's ipRouteProto value. If this information is not present, its value should be set to the OBJECT IDENTIFIER { 0 0 }, which is a syntatically valid object identifier, and any conformant implementation of ASN.1 and BER must be able to generate and recognize this value.
IP ipRouteMask	1.3.6.1.2.1.4.21.1.11	IpAddress	read-write	Indicate the mask to be logical-ANDed with the destination address before being compared to the value in the ipRouteDest field. For those systems that do not support arbitrary subnet masks, an agent constructs the value of the ipRouteMask by determining whether the value of the correspondent ipRouteDest field belong to a class-A, B, or C network, and then using one of: mask network 255.0.0.0 class-A 255.255.0.0 class-B 255.255.255.0 class-C If the value of the ipRouteDest is 0.0.0.0 (a default route), then the mask value is also 0.0.0.0. It should be noted that all IP routing subsystems implicitly use this mechanism.
INT ipRouteMetric1	1.3.6.1.2.1.4.21.1.3	INTEGER	read-write	The primary routing metric for this route. The semantics of this metric are determined by the routing-protocol specified in the route's ipRouteProto value. If this metric is not used, its value should be set to -1.
INT ipRouteMetric2	1.3.6.1.2.1.4.21.1.4	INTEGER	read-write	An alternate routing metric for this route. The semantics of this metric are determined by the routing-protocol specified in the route's ipRouteProto value. If this metric is not used, its value should be set to -1.
INT ipRouteMetric3	1.3.6.1.2.1.4.21.1.5	INTEGER	read-write	An alternate routing metric for this route. The semantics of this metric are determined by the routing-protocol specified in the route's ipRouteProto value. If this metric is not used, its value should be set to -1.
INT ipRouteMetric4	1.3.6.1.2.1.4.21.1.6	INTEGER	read-write	An alternate routing metric for this route. The semantics of this metric are determined by the routing-protocol specified in the route's ipRouteProto value. If this metric is not used, its value should be set to -1.
INT ipRouteMetric5	1.3.6.1.2.1.4.21.1.12	INTEGER	read-write	An alternate routing metric for this route. The semantics of this metric are determined by the routing-protocol specified in the route's ipRouteProto value. If this metric is not used, its value should be set to -1.
IP ipRouteNextHop	1.3.6.1.2.1.4.21.1.7	IpAddress	read-write	The IP address of the next hop of this route. (In the case of a route bound to an interface which is realized via a broadcast media, the value of this field is the agent's IP address on that interface.)
INT ipRouteProto	1.3.6.1.2.1.4.21.1.9	INTEGER	read-only	The routing mechanism via which this route was learned. Inclusion of values for gateway routing protocols is not intended to imply that hosts should support those protocols.
ipRouteTable	1.3.6.1.2.1.4.21		not-accessible	This entity's IP Routing table.
INT ipRouteType	1.3.6.1.2.1.4.21.1.8	INTEGER	read-write	The type of route. Note that the values direct(3) and indirect(4) refer to the notion of direct and indirect routing in the IP architecture. Setting this object to the value invalid(2) has the effect of invalidating the corresponding entry in the ipRouteTable object. That is, it effectively dissasociates the destination identified with said entry from the route identified with said entry. It is an implementation-specific matter as to whether the agent removes an invalidated entry from the table. Accordingly, management stations must be prepared to receive tabular information from agents that corresponds to entries not currently in use. Proper interpretation of such entries requires examination of the relevant ipRouteType object.
CTR ipRoutingDiscards	1.3.6.1.2.1.4.23	Counter	read-only	The number of routing entries which were chosen to be discarded even though they are valid. One possible reason for discarding such an entry could be to free-up buffer space for other routing entries.
mib_2	1.3.6.1.2.1
products	1.3.6.1.4.1.1919.1
snmp	1.3.6.1.2.1.11
INT snmpEnableAuthenTraps	1.3.6.1.2.1.11.30	INTEGER	read-write	Indicates whether the SNMP agent process is permitted to generate authentication-failure traps. The value of this object overrides any configuration information; as such, it provides a means whereby all authentication-failure traps may be disabled. Note that it is strongly recommended that this object be stored in non-volatile memory so that it remains constant between re-initializations of the network management system.
CTR snmpInASNParseErrs	1.3.6.1.2.1.11.6	Counter	read-only	The total number of ASN.1 or BER errors encountered by the SNMP protocol entity when decoding received SNMP Messages.
CTR snmpInBadCommunityNames	1.3.6.1.2.1.11.4	Counter	read-only	The total number of SNMP Messages delivered to the SNMP protocol entity which used a SNMP community name not known to said entity.
CTR snmpInBadCommunityUses	1.3.6.1.2.1.11.5	Counter	read-only	The total number of SNMP Messages delivered to the SNMP protocol entity which represented an SNMP operation which was not allowed by the SNMP community named in the Message.
CTR snmpInBadValues	1.3.6.1.2.1.11.10	Counter	read-only	The total number of SNMP PDUs which were delivered to the SNMP protocol entity and for which the value of the error-status field is `badValue'.
CTR snmpInBadVersions	1.3.6.1.2.1.11.3	Counter	read-only	The total number of SNMP Messages which were delivered to the SNMP protocol entity and were for an unsupported SNMP version.
CTR snmpInGenErrs	1.3.6.1.2.1.11.12	Counter	read-only	The total number of SNMP PDUs which were delivered to the SNMP protocol entity and for which the value of the error-status field is `genErr'.
CTR snmpInGetNexts	1.3.6.1.2.1.11.16	Counter	read-only	The total number of SNMP Get-Next PDUs which have been accepted and processed by the SNMP protocol entity.
CTR snmpInGetRequests	1.3.6.1.2.1.11.15	Counter	read-only	The total number of SNMP Get-Request PDUs which have been accepted and processed by the SNMP protocol entity.
CTR snmpInGetResponses	1.3.6.1.2.1.11.18	Counter	read-only	The total number of SNMP Get-Response PDUs which have been accepted and processed by the SNMP protocol entity.
CTR snmpInNoSuchNames	1.3.6.1.2.1.11.9	Counter	read-only	The total number of SNMP PDUs which were delivered to the SNMP protocol entity and for which the value of the error-status field is `noSuchName'.
CTR snmpInPkts	1.3.6.1.2.1.11.1	Counter	read-only	The total number of Messages delivered to the SNMP entity from the transport service.
CTR snmpInReadOnlys	1.3.6.1.2.1.11.11	Counter	read-only	The total number valid SNMP PDUs which were delivered to the SNMP protocol entity and for which the value of the error-status field is `readOnly'. It should be noted that it is a protocol error to generate an SNMP PDU which contains the value `readOnly' in the error-status field, as such this object is provided as a means of detecting incorrect implementations of the SNMP.
CTR snmpInSetRequests	1.3.6.1.2.1.11.17	Counter	read-only	The total number of SNMP Set-Request PDUs which have been accepted and processed by the SNMP protocol entity.
CTR snmpInTooBigs	1.3.6.1.2.1.11.8	Counter	read-only	The total number of SNMP PDUs which were delivered to the SNMP protocol entity and for which the value of the error-status field is `tooBig'.
CTR snmpInTotalReqVars	1.3.6.1.2.1.11.13	Counter	read-only	The total number of MIB objects which have been retrieved successfully by the SNMP protocol entity as the result of receiving valid SNMP Get-Request and Get-Next PDUs.
CTR snmpInTotalSetVars	1.3.6.1.2.1.11.14	Counter	read-only	The total number of MIB objects which have been altered successfully by the SNMP protocol entity as the result of receiving valid SNMP Set-Request PDUs.
CTR snmpInTraps	1.3.6.1.2.1.11.19	Counter	read-only	The total number of SNMP Trap PDUs which have been accepted and processed by the SNMP protocol entity.
CTR snmpOutBadValues	1.3.6.1.2.1.11.22	Counter	read-only	The total number of SNMP PDUs which were generated by the SNMP protocol entity and for which the value of the error-status field is `badValue'.
CTR snmpOutGenErrs	1.3.6.1.2.1.11.24	Counter	read-only	The total number of SNMP PDUs which were generated by the SNMP protocol entity and for which the value of the error-status field is `genErr'.
CTR snmpOutGetNexts	1.3.6.1.2.1.11.26	Counter	read-only	The total number of SNMP Get-Next PDUs which have been generated by the SNMP protocol entity.
CTR snmpOutGetRequests	1.3.6.1.2.1.11.25	Counter	read-only	The total number of SNMP Get-Request PDUs which have been generated by the SNMP protocol entity.
CTR snmpOutGetResponses	1.3.6.1.2.1.11.28	Counter	read-only	The total number of SNMP Get-Response PDUs which have been generated by the SNMP protocol entity.
CTR snmpOutNoSuchNames	1.3.6.1.2.1.11.21	Counter	read-only	The total number of SNMP PDUs which were generated by the SNMP protocol entity and for which the value of the error-status is `noSuchName'.
CTR snmpOutPkts	1.3.6.1.2.1.11.2	Counter	read-only	The total number of SNMP Messages which were passed from the SNMP protocol entity to the transport service.
CTR snmpOutSetRequests	1.3.6.1.2.1.11.27	Counter	read-only	The total number of SNMP Set-Request PDUs which have been generated by the SNMP protocol entity.
CTR snmpOutTooBigs	1.3.6.1.2.1.11.20	Counter	read-only	The total number of SNMP PDUs which were generated by the SNMP protocol entity and for which the value of the error-status field is `tooBig.'
CTR snmpOutTraps	1.3.6.1.2.1.11.29	Counter	read-only	The total number of SNMP Trap PDUs which have been generated by the SNMP protocol entity.
STR sysContact	1.3.6.1.2.1.1.4	DisplayString	read-write	The textual identification of the contact person for this managed node, together with information on how to contact this person.
STR sysDescr	1.3.6.1.2.1.1.1	DisplayString	read-only	A textual description of the entity. This value should include the full name and version identification of the system's hardware type, software operating-system, and networking software. It is mandatory that this only contain printable ASCII characters.
STR sysLocation	1.3.6.1.2.1.1.6	DisplayString	read-write	The physical location of this node (e.g., `telephone closet, 3rd floor').
STR sysName	1.3.6.1.2.1.1.5	DisplayString	read-write	An administratively-assigned name for this managed node. By convention, this is the node's fully-qualified domain name.
OID sysObjectID	1.3.6.1.2.1.1.2	OBJECT IDENTIFIER	read-only	The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining `what kind of box' is being managed. For example, if vendor `Flintstones, Inc.' was assigned the subtree 1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.
INT sysServices	1.3.6.1.2.1.1.7	INTEGER	read-only	A value which indicates the set of services that this entity primarily offers. The value is a sum. This sum initially takes the value zero, Then, for each layer, L, in the range 1 through 7, that this node performs transactions for, 2 raised to (L - 1) is added to the sum. For example, a node which performs primarily routing functions would have a value of 4 (2^(3-1)). In contrast, a node which is a host offering application services would have a value of 72 (2^(4-1) + 2^(7-1)). Note that in the context of the Internet suite of protocols, values should be calculated accordingly: layer functionality 1 physical (e.g., repeaters) 2 datalink/subnetwork (e.g., bridges) 3 internet (e.g., IP gateways) 4 end-to-end (e.g., IP hosts) 7 applications (e.g., mail relays) For systems including OSI protocols, layers 5 and 6 may also be counted.
system	1.3.6.1.2.1.1
TIK sysUpTime	1.3.6.1.2.1.1.3	TimeTicks	read-only	The time (in hundredths of a second) since the network management portion of the system was last re-initialized.
tcp	1.3.6.1.2.1.6
CTR tcpActiveOpens	1.3.6.1.2.1.6.5	Counter	read-only	The number of times TCP connections have made a direct transition to the SYN-SENT state from the CLOSED state.
CTR tcpAttemptFails	1.3.6.1.2.1.6.7	Counter	read-only	The number of times TCP connections have made a direct transition to the CLOSED state from either the SYN-SENT state or the SYN-RCVD state, plus the number of times TCP connections have made a direct transition to the LISTEN state from the SYN-RCVD state.
tcpConnEntry	1.3.6.1.2.1.6.13.1		not-accessible	Information about a particular current TCP connection. An object of this type is transient, in that it ceases to exist when (or soon after) the connection makes the transition to the CLOSED state.
IP tcpConnLocalAddress	1.3.6.1.2.1.6.13.1.2	IpAddress	read-only	The local IP address for this TCP connection. In the case of a connection in the listen state which is willing to accept connections for any IP interface associated with the node, the value 0.0.0.0 is used.
INT tcpConnLocalPort	1.3.6.1.2.1.6.13.1.3	INTEGER	read-only	The local port number for this TCP connection.
IP tcpConnRemAddress	1.3.6.1.2.1.6.13.1.4	IpAddress	read-only	The remote IP address for this TCP connection.
INT tcpConnRemPort	1.3.6.1.2.1.6.13.1.5	INTEGER	read-only	The remote port number for this TCP connection.
INT tcpConnState	1.3.6.1.2.1.6.13.1.1	INTEGER	read-write	The state of this TCP connection. The only value which may be set by a management station is deleteTCB(12). Accordingly, it is appropriate for an agent to return a `badValue' response if a management station attempts to set this object to any other value. If a management station sets this object to the value deleteTCB(12), then this has the effect of deleting the TCB (as defined in RFC 793) of the corresponding connection on the managed node, resulting in immediate termination of the connection. As an implementation-specific option, a RST segment may be sent from the managed node to the other TCP endpoint (note however that RST segments are not sent reliably).
tcpConnTable	1.3.6.1.2.1.6.13		not-accessible	A table containing TCP connection-specific information.
GAU tcpCurrEstab	1.3.6.1.2.1.6.9	Gauge	read-only	The number of TCP connections for which the current state is either ESTABLISHED or CLOSE- WAIT.
CTR tcpEstabResets	1.3.6.1.2.1.6.8	Counter	read-only	The number of times TCP connections have made a direct transition to the CLOSED state from either the ESTABLISHED state or the CLOSE-WAIT state.
CTR tcpInErrs	1.3.6.1.2.1.6.14	Counter	read-only	The total number of segments received in error (e.g., bad TCP checksums).
CTR tcpInSegs	1.3.6.1.2.1.6.10	Counter	read-only	The total number of segments received, including those received in error. This count includes segments received on currently established connections.
INT tcpMaxConn	1.3.6.1.2.1.6.4	INTEGER	read-only	The limit on the total number of TCP connections the entity can support. In entities where the maximum number of connections is dynamic, this object should contain the value -1.
CTR tcpOutRsts	1.3.6.1.2.1.6.15	Counter	read-only	The number of TCP segments sent containing the RST flag.
CTR tcpOutSegs	1.3.6.1.2.1.6.11	Counter	read-only	The total number of segments sent, including those on current connections but excluding those containing only retransmitted octets.
CTR tcpPassiveOpens	1.3.6.1.2.1.6.6	Counter	read-only	The number of times TCP connections have made a direct transition to the SYN-RCVD state from the LISTEN state.
CTR tcpRetransSegs	1.3.6.1.2.1.6.12	Counter	read-only	The total number of segments retransmitted - that is, the number of TCP segments transmitted containing one or more previously transmitted octets.
INT tcpRtoAlgorithm	1.3.6.1.2.1.6.1	INTEGER	read-only	The algorithm used to determine the timeout value used for retransmitting unacknowledged octets.
INT tcpRtoMax	1.3.6.1.2.1.6.3	INTEGER	read-only	The maximum value permitted by a TCP implementation for the retransmission timeout, measured in milliseconds. More refined semantics for objects of this type depend upon the algorithm used to determine the retransmission timeout. In particular, when the timeout algorithm is rsre(3), an object of this type has the semantics of the UBOUND quantity described in RFC 793.
INT tcpRtoMin	1.3.6.1.2.1.6.2	INTEGER	read-only	The minimum value permitted by a TCP implementation for the retransmission timeout, measured in milliseconds. More refined semantics for objects of this type depend upon the algorithm used to determine the retransmission timeout. In particular, when the timeout algorithm is rsre(3), an object of this type has the semantics of the LBOUND quantity described in RFC 793.
transmission	1.3.6.1.2.1.10
udp	1.3.6.1.2.1.7
udpEntry	1.3.6.1.2.1.7.5.1		not-accessible	Information about a particular current UDP listener.
CTR udpInDatagrams	1.3.6.1.2.1.7.1	Counter	read-only	The total number of UDP datagrams delivered to UDP users.
CTR udpInErrors	1.3.6.1.2.1.7.3	Counter	read-only	The number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port.
IP udpLocalAddress	1.3.6.1.2.1.7.5.1.1	IpAddress	read-only	The local IP address for this UDP listener. In the case of a UDP listener which is willing to accept datagrams for any IP interface associated with the node, the value 0.0.0.0 is used.
INT udpLocalPort	1.3.6.1.2.1.7.5.1.2	INTEGER	read-only	The local port number for this UDP listener.
CTR udpNoPorts	1.3.6.1.2.1.7.2	Counter	read-only	The total number of received UDP datagrams for which there was no application at the destination port.
CTR udpOutDatagrams	1.3.6.1.2.1.7.4	Counter	read-only	The total number of UDP datagrams sent from this entity.
udpTable	1.3.6.1.2.1.7.5		not-accessible	A table containing UDP listener information.

RFC description

Firewall module state, packet statistics, and filter configuration for Check Point products.

Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CHECKPOINT-MIB-2

What Is CHECKPOINT-MIB-2?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description