All MIBs › CHECKPOINT-MIB › cpvIKETotalFailuresResp
cpvIKETotalFailuresResp
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::cpvIKETotalFailuresResp
OID (numeric): 1.3.6.1.4.1.2620.1.2.9.2.3
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-only
Description: IKE total failures (responder errors)
What is cpvIKETotalFailuresResp?
This DisplayString is the lifetime count of IKE failures on negotiations this gateway responded to, per 'IKE total failures (responder errors).' Since these are inbound attempts, a climbing count often reflects remote peers using stale credentials or attackers probing the VPN service rather than a local misconfiguration. A burst of several hundred responder failures within a few minutes, all from different source IPs, would look like a credential-guessing scan against the gateway's VPN endpoint.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.9.2.3 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::cpvIKETotalFailuresResp
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.2.9.2.3.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::cpvIKETotalFailuresResp.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::cpvIKETotalFailuresResp OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.2 | vpn | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.9 | cpvIKE | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.9.2 | cpvIKEerrors | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.2.9.2.3 | cpvIKETotalFailuresResp | CHECKPOINT-MIB |