All MIBs › CHECKPOINT-MIB › numOfHttpASCIIViolations
numOfHttpASCIIViolations
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::numOfHttpASCIIViolations
OID (numeric): 1.3.6.1.4.1.2620.1.17.1.3.1.3.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: HTTP - ASCII Violations
What is numOfHttpASCIIViolations?
This counts HTTP requests blocked for containing non-ASCII or malformed character encoding where standard ASCII encoding is expected. Attackers use non-standard encoding specifically to evade signature-based inspection or smuggle exploit payloads past filters that only pattern-match plain text, so this counter is a proxy for that evasion technique being attempted against the web servers behind this gateway. For example, a request using overlong UTF-8 encoding to disguise a SQL-injection payload getting caught and counted here.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.3.1.3.1 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::numOfHttpASCIIViolations
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.3.1.3.1.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::numOfHttpASCIIViolations.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::numOfHttpASCIIViolations OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.17 | smartDefense | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1 | asmAttacks | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.3 | asmLayer5 | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.3.1 | asmHTTP | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.3.1.3 | asmHttpAsciiViolation | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.3.1.3.1 | numOfHttpASCIIViolations | CHECKPOINT-MIB |