CHECKPOINT-MIB-2 :: icmpOutAddrMaskReps

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCHECKPOINT-MIB-2icmpOutAddrMaskReps

icmpOutAddrMaskReps

Module: CHECKPOINT-MIB-2

OID (symbolic): CHECKPOINT-MIB-2::icmpOutAddrMaskReps

OID (numeric): 1.3.6.1.2.1.5.26

Node type: OBJECT-TYPE

Type: Counter

Access: read-only

Description: The number of ICMP Address Mask Reply messages sent.

What is icmpOutAddrMaskReps?

Counts ICMP Address Mask Reply messages sent by the device, how many mask requests addressed to it the gateway answered. A nonzero value here specifically means the gateway is willing to disclose its subnet mask to whoever asks over ICMP, which a hardening review would flag on an internet-facing interface as an unnecessary information leak worth filtering. Example: finding icmpOutAddrMaskReps incrementing in response to probes from the external interface is the kind of finding that leads a hardening checklist to explicitly block address-mask requests inbound.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.2.1.5.26
snmpwalk -v2c -c public <target> CHECKPOINT-MIB-2::icmpOutAddrMaskReps

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.2.1.5.26.1
snmpget -v2c -c public <target> CHECKPOINT-MIB-2::icmpOutAddrMaskReps.1

Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB-2::icmpOutAddrMaskReps OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.

OID Breakdown

Upper-level ancestors (6 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.2mgmtAXON-MIB
1.3.6.1.2.1mib_2AXON-MIB
Numeric OIDNameModule
1.3.6.1.2.1.5icmpCHECKPOINT-MIB-2
1.3.6.1.2.1.5.26icmpOutAddrMaskRepsCHECKPOINT-MIB-2