CHECKPOINT-MIB

Manages Check Point firewall and VPN gateway including policy status, connection table statistics, and security module health.

CHECKPOINT-MIB, commonly called the checkpoint mib by administrators, is Check Point Software Technologies' vendor MIB for managing Check Point firewall and VPN gateway appliances, covering security policy status, connection-table statistics, and overall Security Module/Gateway health. It exposes data spanning firewall policy state (which policy is currently installed and its install time), traffic/connection performance counters (active connection table size and utilization), and module health indicators reflecting whether the firewall's inspection engine and VPN daemons are running correctly. This directly supports monitoring both software status (policy installation state, connection table capacity/utilization as a load indicator, and Security Module process health) and, to a lesser extent, hardware health of the gateway appliance running Check Point's software. Check Point documents its most common OIDs in its own SNMP Best Practices Guide (sk98552) rather than layering heavily on other public MIBs, though it coexists with standard IF-MIB/HOST-RESOURCES-MIB data for interface and OS-level metrics on the same gateway. It is deployed on Check Point firewall/VPN gateway appliances (physical or virtual) in enterprise perimeter security and branch/VPN concentrator roles.

No sample objects were extracted for this module, but per its description an admin would typically poll the connections table size/limit to detect approaching capacity (a classic cause of dropped new connections under load), check the currently installed policy name/timestamp to confirm the expected security policy is active, and monitor Security Module/daemon status objects to catch a crashed or unresponsive inspection process. Check Point's own SNMP Best Practices Guide (sk98552) is the authoritative reference for the specific OIDs used in these checks.