All MIBs › CHECKPOINT-MIB › cpvCurrEspSAsOut
cpvCurrEspSAsOut
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::cpvCurrEspSAsOut
OID (numeric): 1.3.6.1.4.1.2620.1.2.5.2.3
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: IPsec current Outbound ESP SAs
What is cpvCurrEspSAsOut?
The desc explicitly states this is the IPsec current Outbound ESP SAs, the mirror of cpvCurrEspSAsIn for the outbound direction. Comparing this to cpvCurrEspSAsIn should normally show matching or very close counts, since a healthy bidirectional IPsec SA pair has one inbound and one outbound SA per tunnel; a persistent mismatch between the two counts points at an asymmetric or partially-failed tunnel. e.g. cpvCurrEspSAsOut = 14 matching cpvCurrEspSAsIn = 14 indicates all tunnels have healthy bidirectional SAs, while 14 versus 12 would flag two tunnels missing their outbound leg.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.5.2.3 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::cpvCurrEspSAsOut
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.5.2.3.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::cpvCurrEspSAsOut.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::cpvCurrEspSAsOut OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.2 | vpn | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5 | cpvIPsec | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5.2 | cpvSaStatistics | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.5.2.3 | cpvCurrEspSAsOut | CHECKPOINT-MIB |