All MIBs › CHECKPOINT-MIB › identityAwarenessADQueryStatusCurrStatus
identityAwarenessADQueryStatusCurrStatus
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::identityAwarenessADQueryStatusCurrStatus
OID (numeric): 1.3.6.1.4.1.2620.1.38.25.1.2
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: AD Query Status: Current status Possible values include: Ok 0 Bad Credentials 1 Connectivity Error 2 Internal Error 3 Connection Time Out 4
What is identityAwarenessADQueryStatusCurrStatus?
This is an enumerated status for the AD Query connection to a specific domain: Ok(0), Bad Credentials(1), Connectivity Error(2), Internal Error(3), or Connection Time Out. This value directly explains drops in identityAwarenessAuthUsersADQuery, since for example a value of 1 (Bad Credentials) means the service account the gateway uses to poll the domain controller's security log had its password changed or expired, silently breaking transparent identification for every user in that domain. For example, the status might flip to 1 right after a scheduled service-account password rotation.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.38.25.1.2 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::identityAwarenessADQueryStatusCurrStatus
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.38.25.1.2.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::identityAwarenessADQueryStatusCurrStatus.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> identityAwarenessADQueryStatusCurrStatus.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::identityAwarenessADQueryStatusCurrStatus OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.38 | identityAwareness | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.38.25 | identityAwarenessADQueryStatusTable | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.38.25.1 | identityAwarenessADQueryStatusEntry | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.38.25.1.2 | identityAwarenessADQueryStatusCurrStatus | CHECKPOINT-MIB |