All MIBs › CISCO-FIREPOWER-DPSEC-MIB
Organization: Cisco Systems Inc.
Last Updated: 2022-08-25
Category: Cisco Devices, Hardware and Environment
Description: Provides management objects for data path security policies and enforcement on Cisco UCS/Firepower platform components.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CISCO-FIREPOWER-DPSEC-MIB?
CISCO-FIREPOWER-DPSEC-MIB is part of the Cisco UCS/Firepower model-based MIB family and represents the data-path security (DPSEC) package, covering MAC-address security enforcement policies applied to virtual and physical network interfaces. It exposes objects describing per-interface MAC security settings, including whether MAC address forging/spoofing is permitted, the policy level in effect, and who owns that policy. This is primarily a configuration/policy-status MIB rather than a performance-counter MIB, but it is directly relevant to monitoring the security posture of network adapters (vNICs) for unauthorized MAC address use. Like its sibling Firepower MIBs, it shares the common Dn/Rn/InstanceId managed-object model of Cisco's UCS Manager information model rather than an external IETF dependency. It is deployed on Cisco UCS/Firepower fabric interconnects and blade/adapter hardware where administrators enforce network security policy at the interface level. Engineers can download the CISCO-FIREPOWER-DPSEC-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-FIREPOWER-DPSEC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cisco UCS/Firepower blade and adapter hardware
Monitoring Examples
An admin can query cfprDpsecMacTable/cfprDpsecMacEntry to check cfprDpsecMacForge on a given interface (cfprDpsecMacIntId) and confirm MAC forging protection is enabled as expected; cfprDpsecMacPolicyLevel and cfprDpsecMacPolicyOwner reveal which policy tier and administrator is responsible for a given adapter's setting, useful when auditing why a security exception exists on one interface but not others.
What Can Be Monitored
- MAC forge/spoof protection state
- interface security policy level
- policy owner
- per-interface MAC security configuration
Imported Objects
From CISCO-FIREPOWER-MIB
| CfprManagedObjectDn | |
| CfprManagedObjectId | |
| ciscoFirepowerMIBObjects | OBJECT-IDENTITY |
| CfprDpsecForgedTransmit | |
| CfprPolicyPolicyOwner |
From CISCO-SMI
| ciscoMgmt | OBJECT-IDENTITY |
From CISCO-TC
| CiscoAlarmSeverity | |
| CiscoInetAddressMask | |
| CiscoNetworkAddress | |
| TimeIntervalSec | |
| Unsigned64 |
From INET-ADDRESS-MIB
| InetAddressIPv4 | |
| InetAddressIPv6 |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| TimeTicks | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| MacAddress | |
| RowPointer | |
| TEXTUAL-CONVENTION | |
| TimeInterval | |
| TimeStamp | |
| TruthValue |
OIDs
RFC description
Cisco Firepower data plane security monitoring including MAC address filtering and policy management.
Start monitoring Cisco UCS/Firepower blade and adapter hardware with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.