CISCO-SSL-PROXY-MIB

All MIBs › CISCO-SSL-PROXY-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2012-09-18

Category: Cisco Devices, VPN and Security, Web and Application Servers

Description: Manages SSL proxy and offload sessions including certificate handling and connection statistics on Cisco devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-SSL-PROXY-MIB?

CISCO-SSL-PROXY-MIB manages Cisco SSL/TLS proxy devices that terminate and accelerate SSL and TLS transactions on behalf of backend servers or clients, part of Cisco's security/application-acceleration MIB family. It exposes global proxy configuration such as software version and FIPS mode, supported cipher suites (RC4-MD5, RC4-SHA, DES-CBC-SHA, 3DES-CBC-SHA), a table of individual proxy server instances, and notifications for operational status changes and certificate expiration. Its monitoring value spans both software configuration and operational/fault status: administrators track cspGcNotifyProxyServOperStatus traps to detect a proxy server going down, and cspGcNotifyPSCertExpiring alerts (tied to cspGcPSCertExpireInterval) to catch SSL certificates approaching expiration before they cause an outage. It is a self-contained Cisco proprietary MIB, though it interoperates with standard SSL/TLS protocol semantics rather than another SNMP MIB. It is deployed on Cisco SSL offload/proxy appliances or modules front-ending secure web and application servers. Engineers can download the CISCO-SSL-PROXY-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-SSL-PROXY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco SSL proxy/offload appliances

Monitoring Examples

An administrator would poll cspPsTable/cspPsEntry, keyed by cspPsName, to check the operational status of each configured SSL proxy server instance, and confirm cspGcFIPSMode reflects the required compliance posture. Subscribing to cspGcNotifyPSCertExpiring, driven by the cspGcPSCertExpireInterval threshold, would give advance warning of an expiring server certificate before cspGcNotifyProxyServOperStatus reports the proxy going down due to a failed handshake.

What Can Be Monitored

proxy server operational status per instance
FIPS mode state
supported cipher suites
certificate expiration warnings
software/firmware version

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From CISCO-TC

CiscoPort

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using cspTcConnInit OID:

Select a Cisco SSL proxy/offload appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cspTcConnInit into the Find box to locate it in the OID tree, then select it and click OK. The total number of TCP connections initiated by the proxy device. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in number of connections), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoSslProxyMIB	1.3.6.1.4.1.9.9.370			This MIB module is for managing a Secure Socket Layer (SSL) Proxy device which terminates and accelarates SSL and Transport Layer Security (TLS) transactions. The proxy device can act as a SSL server or a SSL client depending on the configuration and the application. In one application, the device acts as a proxy SSL server. It terminates SSL handshakes and TCP connections initiated by SSL clients. The device is configured with a key and a certificate bearing the identity of the SSL server. The device uses this identity to establish the SSL session on behalf of the server, offloading the key establishment and data encryption and decryption work. After the SSL session has been successfully established between the client and the proxy device, the device starts to receive and decrypt the encrypted data sent from the client and forward to the server. The device forwards the clear data to the server on a backend connection. Clear data sent from the server is encrypted by the proxy device before it is forwarded to the SSL client. Optionally, the proxy device is configured to reencrypt the decrypted data sent from the client to the server. The proxy device acts as a SSL client to initiate a SSL session to the server. The decrypted data is encrypted within this SSL session to be forwarded to the server. The encrypted data sent from the server to the device is decrypted and then reencrypted before it is forwarded to the client. In another application, the proxy device forwards data generated by one or more sources to the destination via a SSL session. The proxy device acts as a SSL client and intiates a SSL session to the next hop device. When data is received from the source, the proxy device forwards the data to the next hop using the SSL session. The next hop can continue to forward the data if it is not the destination. The proxy device supports a number of proxy services. Each proxy service defines the role of the proxy device, whether it acts as a SSL server or a SSL client. The rest of the configuration include cryptographic and protocol parameters. This MIB is used for monitoring the configuration, statuses and statistics of the proxy services and the protocols including TCP, SSL and TLS.
C32 cspCertExpiredRedirect	1.3.6.1.4.1.9.9.370.1.20.1.2	Counter32	read-only	This object represents the number of HTTP redirects with reason expired client certificate.
C32 cspCertNotYetValidRedirect	1.3.6.1.4.1.9.9.370.1.20.1.1	Counter32	read-only	This object represents the number of HTTP redirects with reason client certificate is not valid yet.
C32 cspCertRevokedRedirect	1.3.6.1.4.1.9.9.370.1.20.1.4	Counter32	read-only	This object represents the number of HTTP redirects with reason revoked client certificate.
C32 cspCertSignatureFailedRedirect	1.3.6.1.4.1.9.9.370.1.20.1.8	Counter32	read-only	This object represents the number of HTTP redirects with reason invalid certificate signature.
TIM cspCpuClearTime	1.3.6.1.4.1.9.9.370.1.18.1.1.3	TimeStamp	read-only	The last time when the CPU counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
G32 cspCpuInterruptUtil	1.3.6.1.4.1.9.9.370.1.18.1.1.5	Gauge32	read-only	The percentage of CPU time utilized at interrupt level.
G32 cspCpuInterruptUtilIn1Min	1.3.6.1.4.1.9.9.370.1.18.1.1.10	Gauge32	read-only	The percentage of CPU time utilized at interrupt level within the past minute.
G32 cspCpuInterruptUtilIn5Min	1.3.6.1.4.1.9.9.370.1.18.1.1.11	Gauge32	read-only	The percentage of CPU time utilized at interrupt level within the past five minutes.
G32 cspCpuInterruptUtilIn5Sec	1.3.6.1.4.1.9.9.370.1.18.1.1.9	Gauge32	read-only	The percentage of CPU time utilized at interrupt level within the past five seconds.
STR cspCpuName	1.3.6.1.4.1.9.9.370.1.18.1.1.1	SnmpAdminString	not-accessible	The unique name of a CPU on the proxy device.
G32 cspCpuProcessUtil	1.3.6.1.4.1.9.9.370.1.18.1.1.4	Gauge32	read-only	The percentage of CPU time utilized at process level.
G32 cspCpuProcessUtilIn1Min	1.3.6.1.4.1.9.9.370.1.18.1.1.7	Gauge32	read-only	The percentage of CPU time utilized at process level within the past minute.
G32 cspCpuProcessUtilIn5Min	1.3.6.1.4.1.9.9.370.1.18.1.1.8	Gauge32	read-only	The percentage of CPU time utilized at process level within the past five minutes.
G32 cspCpuProcessUtilIn5Sec	1.3.6.1.4.1.9.9.370.1.18.1.1.6	Gauge32	read-only	The percentage of CPU time utilized at process level within the past five seconds.
INT cspCpuStatus	1.3.6.1.4.1.9.9.370.1.18.1.1.2	INTEGER	read-only	The operational status of the CPU.
cspCpuStatusEntry	1.3.6.1.4.1.9.9.370.1.18.1.1		not-accessible	The CPU status information entry. Each entry displays the operational status and usage information about one CPU on the proxy device. A proxy device can have one or more CPU's.
cspCpuStatusGroup	1.3.6.1.4.1.9.9.370.2.2.13			A collection of statuses and usage information about each CPU on the SSL proxy device.
cspCpuStatusInfo	1.3.6.1.4.1.9.9.370.1.18
cspCpuStatusTable	1.3.6.1.4.1.9.9.370.1.18.1		not-accessible	A list of CPU status information entries.
C32 cspCrlExpiredRedirect	1.3.6.1.4.1.9.9.370.1.20.1.7	Counter32	read-only	This object represents the number of HTTP redirects with reason CRL expired during revocation check.
T/F cspGcFIPSMode	1.3.6.1.4.1.9.9.370.1.1.2	TruthValue	read-write	An indication of whether or not the proxy device is operating in FIPS (Federal Information Processing Standards) approved mode. If 'true', the proxy device is operating in FIPS mode. When the device operates in FIPS mode, only approved cryptographic algorithms and key strengths are enabled. Authentication and other security requirements of FIPS will also be enforced in this mode.
T/F cspGcNotifyProxyServOperStatus	1.3.6.1.4.1.9.9.370.1.1.7	TruthValue	read-write	An indication of whether or not a cspServOperStatus notification should be issued when the operation status of proxy services changes. If such a notification is desired, it is the responsibility of the management entity to ensure that the SNMP administrative model is configured in such a way as to allow the notification to be delivered.
T/F cspGcNotifyPSCertExpiring	1.3.6.1.4.1.9.9.370.1.1.8	TruthValue	read-write	An indication of whether or not a cspServCertExpiring notification should be issued when a proxy service certificate will be expiring in the configured time interval cspGcPSCertExpireInterval. If such a notification is desired, it is the responsibility of the management entity to ensure that the SNMP administrative model is configured in such a way as to allow the notification to be delivered.
I32 cspGcPSCertExpireInterval	1.3.6.1.4.1.9.9.370.1.1.9	Integer32	read-write	The proxy service certificate expiration time interval, used to determine when the cspServCertExpiring notification should be issued if cspGcNotifyPSCertExpiring is 'true'. If this time interval is 0, no proxy service certification expiration will be checked.
T/F cspGcRSA3descbcsha	1.3.6.1.4.1.9.9.370.1.1.6	TruthValue	read-only	An indication of whether or not the proxy device supports the cipher suite RSA_WITH_3DES_EDE_CBC_SHA. If 'true', the cipher suite is supported.
T/F cspGcRSAdescbcsha	1.3.6.1.4.1.9.9.370.1.1.5	TruthValue	read-only	An indication of whether or not the proxy device supports the cipher suite RSA_WITH_DES_CBC_SHA. If 'true', the cipher suite is supported.
T/F cspGcRSArc4128md5	1.3.6.1.4.1.9.9.370.1.1.3	TruthValue	read-only	An indication of whether or not the proxy device supports the cipher suite RSA_WITH_RC4_128_MD5. If 'true', the cipher suite is supported.
T/F cspGcRSArc4128sha	1.3.6.1.4.1.9.9.370.1.1.4	TruthValue	read-only	An indication of whether or not the proxy device supports the cipher suite RSA_WITH_RC4_128_SHA. If 'true', the cipher suite is supported.
STR cspGcVersion	1.3.6.1.4.1.9.9.370.1.1.1	SnmpAdminString	read-only	The version information of the SSL proxy device, for display only.
cspGlobalConfig	1.3.6.1.4.1.9.9.370.1.1
cspGlobalConfigGroup	1.3.6.1.4.1.9.9.370.2.2.1			A collection of global configuration objects.
cspHttpHeaderInsertedInfo	1.3.6.1.4.1.9.9.370.1.19
cspHttpHeaderInsertedSslClientCertGroup	1.3.6.1.4.1.9.9.370.2.2.16			A collection of stats related to the insertion of SSL client certificate information into HTTP header.
cspHttpHeaderInsertedSslClientCertStats	1.3.6.1.4.1.9.9.370.1.19.2
cspHttpHeaderInsertedSslInfoGroup	1.3.6.1.4.1.9.9.370.2.2.15			A collection of stats related to the insertion of SSL session and SSL server certificate information into HTTP header.
cspHttpHeaderInsertedSslInfoStats	1.3.6.1.4.1.9.9.370.1.19.1
cspHttpRedirectClientCertAuthFailedStats	1.3.6.1.4.1.9.9.370.1.20.1
cspHttpRedirectInfo	1.3.6.1.4.1.9.9.370.1.20
cspHttpRedirectInfoGroup	1.3.6.1.4.1.9.9.370.2.2.17			A collection of counters for http redirect due to client certificate authentication failure type.
C32 cspIssuerCertNotFoundRedirect	1.3.6.1.4.1.9.9.370.1.20.1.3	Counter32	read-only	This object represents the number of HTTP redirects because issuer certificate could not be found. This occurs if the issuer certificate of an untrusted certificate cannot be found.
cspMIBCompliance	1.3.6.1.4.1.9.9.370.2.1.1			The compliance statement for entities which implement the Cisco SSL Proxy MIB.
cspMIBComplianceRev1	1.3.6.1.4.1.9.9.370.2.1.2			The compliance statement for entities which implement the Cisco SSL Proxy MIB.
cspMIBComplianceRev2	1.3.6.1.4.1.9.9.370.2.1.3			The compliance statement for entities which implement the Cisco SSL Proxy MIB.
cspMIBCompliances	1.3.6.1.4.1.9.9.370.2.1
cspMIBConformance	1.3.6.1.4.1.9.9.370.2
cspMIBGroups	1.3.6.1.4.1.9.9.370.2.2
cspMIBNotifications	1.3.6.1.4.1.9.9.370.0
cspMIBObjects	1.3.6.1.4.1.9.9.370.1
C32 cspNoClientCertSentRedirect	1.3.6.1.4.1.9.9.370.1.20.1.5	Counter32	read-only	This object represents the number of HTTP redirects with reason client certificate was not sent.
C32 cspNoCrlAvailableRedirect	1.3.6.1.4.1.9.9.370.1.20.1.6	Counter32	read-only	This object represents the number of HTTP redirects with reason no CRL available during revocation check.
C32 cspNumOfSpoofHttpHeaderDeleted	1.3.6.1.4.1.9.9.370.1.19.1.3	Counter32	read-only	This object represents the number of times a header in the incoming HTTP request was deleted because of possible header spoofing.
C32 cspNumOfSslClientCertHeaderExtracted	1.3.6.1.4.1.9.9.370.1.19.2.1	Counter32	read-only	This object represents the total number of SSL client certificate headers extracted successfully.
C32 cspNumOfSslClientCertHeaderFailedExtracted	1.3.6.1.4.1.9.9.370.1.19.2.2	Counter32	read-only	This object represents the number of SSL client certificate headers that failed to be extracted.
C32 cspNumOfSslInfoFailedInserted	1.3.6.1.4.1.9.9.370.1.19.1.2	Counter32	read-only	This object represents the number of failed insertions of SSL information into HTTP headers.
C32 cspNumOfSslInfoSuccessInserted	1.3.6.1.4.1.9.9.370.1.19.1.1	Counter32	read-only	This object represents the total number of times SSL headers were successfully inserted. The number of individual SSL session headers and SSL server header within a SSL header insertion are not counted separately.
C32 cspNumOfSslServerCerHeaderFailedExtracted	1.3.6.1.4.1.9.9.370.1.19.1.7	Counter32	read-only	This object represents the number of SSL server certificate headers that failed to be extracted.
C32 cspNumOfSslServerCertHeaderExtracted	1.3.6.1.4.1.9.9.370.1.19.1.6	Counter32	read-only	This object represents the total number of SSL server certificate headers extracted successfully.
C32 cspNumOfSslSessHeaderExtracted	1.3.6.1.4.1.9.9.370.1.19.1.4	Counter32	read-only	This object represents the number of SSL session headers extracted.
C32 cspNumOfSslSessHeaderFailedExtracted	1.3.6.1.4.1.9.9.370.1.19.1.5	Counter32	read-only	This object represents the number of SSL session headers that failed to be extracted.
C32 cspNumOfTimesSslHeaderTruncated	1.3.6.1.4.1.9.9.370.1.19.1.8	Counter32	read-only	This object represents the number of times SSL headers were truncated because the size of SSL data inserted exceeds maximum length value.
C32 cspOtherCertErrorRedirect	1.3.6.1.4.1.9.9.370.1.20.1.9	Counter32	read-only	This object represents the number of HTTP redirects with reason other certificate errors.
cspPolicyConfigGroup	1.3.6.1.4.1.9.9.370.2.2.3			A collection of configuration objects for a policy.
cspProxyServiceConfigGroup	1.3.6.1.4.1.9.9.370.2.2.2			A collection of configuration objects for a proxy service.
cspProxyServiceNotificationGroup	1.3.6.1.4.1.9.9.370.2.2.14			A collection of notifications for signaling important proxy service events.
cspProxyServiceSsl3Group	1.3.6.1.4.1.9.9.370.2.2.11			A collection of SSL 3.0 statistics for a proxy service.
cspProxyServiceStatsGroup	1.3.6.1.4.1.9.9.370.2.2.10			A collection of proxy service statistics.
cspProxyServiceTls1Group	1.3.6.1.4.1.9.9.370.2.2.12			A collection of TLS 1.0 statistics for a proxy service.
C32 cspPs3cBadMacRcvd	1.3.6.1.4.1.9.9.370.1.16.1.1.6	Counter32	read-only	The total number of received SSL 3.0 records which have bad MAC (Message Authentication Code).
TIM cspPs3cClearTime	1.3.6.1.4.1.9.9.370.1.16.1.1.1	TimeStamp	read-only	The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have the value of zero.
C32 cspPs3cDataFailed	1.3.6.1.4.1.9.9.370.1.16.1.1.5	Counter32	read-only	The total number of SSL 3.0 connections failed in data phase.
C32 cspPs3cFullHandShake	1.3.6.1.4.1.9.9.370.1.16.1.1.2	Counter32	read-only	The total number of SSL 3.0 full handshakes completed.
C32 cspPs3cHandShakeFailed	1.3.6.1.4.1.9.9.370.1.16.1.1.4	Counter32	read-only	The total number of SSL 3.0 connections failed in handshake phase.
C32 cspPs3cPadErrors	1.3.6.1.4.1.9.9.370.1.16.1.1.7	Counter32	read-only	The total number of received SSL 3.0 records which have pad errors.
C32 cspPs3cResumedHandShake	1.3.6.1.4.1.9.9.370.1.16.1.1.3	Counter32	read-only	The total number of SSL 3.0 resumed handshakes completed.
C32 cspPs3cRSA3desedecbcsha	1.3.6.1.4.1.9.9.370.1.16.1.1.11	Counter32	read-only	The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
C32 cspPs3cRSAdescbcsha	1.3.6.1.4.1.9.9.370.1.16.1.1.10	Counter32	read-only	The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_DES_CBC_SHA.
C32 cspPs3cRSArc4128md5	1.3.6.1.4.1.9.9.370.1.16.1.1.8	Counter32	read-only	The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_RC4_128_MD5.
C32 cspPs3cRSArc4128sha	1.3.6.1.4.1.9.9.370.1.16.1.1.9	Counter32	read-only	The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_RC4_128_SHA.
INT cspPsAdminStatus	1.3.6.1.4.1.9.9.370.1.2.1.1.10	INTEGER	read-create	The administrative status of the proxy service. Each proxy service can be configured to be administratively 'up' or 'down'. If the Adminstrative Status is 'down', the service will not be operational.
C32 cspPscBadMacRcvd	1.3.6.1.4.1.9.9.370.1.15.1.1.20	Counter32	read-only	The total number of received SSL records which have bad MAC (Message Authentication Code).
C32 cspPscBlksDecrypted	1.3.6.1.4.1.9.9.370.1.15.1.1.11	Counter32	read-only	The total number of data blocks that got decrypted.
C32 cspPscBlksEncrypted	1.3.6.1.4.1.9.9.370.1.15.1.1.10	Counter32	read-only	The total number of data blocks that got encrypted.
C32 cspPscBytesDecrypted	1.3.6.1.4.1.9.9.370.1.15.1.1.13	Counter32	read-only	The total number of bytes that got decrypted.
C32 cspPscBytesEncrypted	1.3.6.1.4.1.9.9.370.1.15.1.1.12	Counter32	read-only	The total number of bytes that got encrypted.
TIM cspPscClearTime	1.3.6.1.4.1.9.9.370.1.15.1.1.1	TimeStamp	read-only	The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
C32 cspPscConnAttempt	1.3.6.1.4.1.9.9.370.1.15.1.1.2	Counter32	read-only	The total number of SSL connections attempted.
C32 cspPscConnComplete	1.3.6.1.4.1.9.9.370.1.15.1.1.3	Counter32	read-only	The total number of SSL connections completed.
G32 cspPscConnInDataPhase	1.3.6.1.4.1.9.9.370.1.15.1.1.7	Gauge32	read-only	The number of connections currently in data phase.
G32 cspPscConnInHandShake	1.3.6.1.4.1.9.9.370.1.15.1.1.6	Gauge32	read-only	The number of connections currently in handshake phase.
G32 cspPscConnInReneg	1.3.6.1.4.1.9.9.370.1.15.1.1.9	Gauge32	read-only	The number of connections currently in renegotiation phase.
C32 cspPscDataFailed	1.3.6.1.4.1.9.9.370.1.15.1.1.17	Counter32	read-only	The total number of times SSL connections failed in data phase.
C32 cspPscFatalAlertsRcvd	1.3.6.1.4.1.9.9.370.1.15.1.1.18	Counter32	read-only	The total number of fatal alerts received.
C32 cspPscFatalAlertsSent	1.3.6.1.4.1.9.9.370.1.15.1.1.19	Counter32	read-only	The total number of fatal alerts sent.
C32 cspPscFullHandShake	1.3.6.1.4.1.9.9.370.1.15.1.1.4	Counter32	read-only	The total number of full handshakes completed.
C32 cspPscHandShakeFailed	1.3.6.1.4.1.9.9.370.1.15.1.1.16	Counter32	read-only	The total number of times SSL connections failed in handshake phase.
C32 cspPscNoCipherAlerts	1.3.6.1.4.1.9.9.370.1.15.1.1.22	Counter32	read-only	The total number of alerts sent due to unsupported cipher suites.
C32 cspPscNoComprsnAlerts	1.3.6.1.4.1.9.9.370.1.15.1.1.23	Counter32	read-only	The total number of alerts sent due to unsupported compression scheme.
cspPsConfig	1.3.6.1.4.1.9.9.370.1.2
ROW cspPsConfigRowStatus	1.3.6.1.4.1.9.9.370.1.2.1.1.13	RowStatus	read-create	The conceptual row status of the proxy service configuration entry. An entry cannot have the status 'active' until values have been assigned to the following objects: cspPsVirtualAddress, cspPsVirtualPort, cspPsServerAddress and cspPsServerPort. This entry can be modified when the status is 'active'.
cspPsCounterEntry	1.3.6.1.4.1.9.9.370.1.15.1.1		not-accessible	The proxy service global counter entry. Each entry displays the global SSL counters collected for a proxy service.
cspPsCounters	1.3.6.1.4.1.9.9.370.1.15
cspPsCountersTable	1.3.6.1.4.1.9.9.370.1.15.1		not-accessible	A list of proxy service global counter entries
C32 cspPscPadErrors	1.3.6.1.4.1.9.9.370.1.15.1.1.21	Counter32	read-only	The total number of received SSL records which have pad errors.
C32 cspPscRenegAttempt	1.3.6.1.4.1.9.9.370.1.15.1.1.8	Counter32	read-only	The total number of SSL renegotiations attempted.
C32 cspPscResumedHandShake	1.3.6.1.4.1.9.9.370.1.15.1.1.5	Counter32	read-only	The total number of resumed handshakes completed.
C32 cspPscSessLimitExceed	1.3.6.1.4.1.9.9.370.1.15.1.1.15	Counter32	read-only	The total number of times configured SSL session limit got exceeded. The new connections will be rejected if the session limit is exceeded.
C32 cspPscValidSessions	1.3.6.1.4.1.9.9.370.1.15.1.1.14	Counter32	read-only	The total number of current valid sessions in the session cache.
C32 cspPscVerMismatchAlerts	1.3.6.1.4.1.9.9.370.1.15.1.1.24	Counter32	read-only	The total number of alerts sent due to unsupported SSL or TLS version.
cspPsEntry	1.3.6.1.4.1.9.9.370.1.2.1.1		not-accessible	The proxy service configuration entry. Each entry indicates the name and the index of a proxy service, and a set of configuration parameters to be applied on this proxy service. A unique name can be assigned to each proxy service. Optionally, multiple proxy services can be grouped into a proxy list. All the services in a list have the same name, and each service is assigned a unique index within the list. Each proxy service has a virtual and a server address. This entry reports the address and port configuration, and the administrative and operational statuses of each proxy service. If a service is not operational, the reason for its being 'down' is also reported.
STR cspPskcCertEndDate	1.3.6.1.4.1.9.9.370.1.4.1.1.14	SnmpAdminString	read-only	The time when the certificate validity ends, corresponding to the notAfter time on the certificate.
STR cspPskcCertFileName	1.3.6.1.4.1.9.9.370.1.4.1.1.3	SnmpAdminString	read-create	The name of the file storing the certificate. If there is no such file, the name will be a NULL string.
STR cspPskcCertSerialNum	1.3.6.1.4.1.9.9.370.1.4.1.1.10	SnmpAdminString	read-only	The serial number of the certificate assigned to the proxy service. If there is no serial number on the certificate, this will be a NULL string.
STR cspPskcCertStartDate	1.3.6.1.4.1.9.9.370.1.4.1.1.13	SnmpAdminString	read-only	The time when the certificate starts to be valid, corresponding to the notBefore time on the certificate.
INT cspPskcCertStatus	1.3.6.1.4.1.9.9.370.1.4.1.1.8	INTEGER	read-only	The status of the certificate that is used to publish the public key. The following values are defined: Valid(1) : Certificate is valid, Expired(2) : Certificate has expired, Rolling Over(3): Certificate is being renewed. Whether or not an expired certificate can be used for the proxy service is implementation specific.
STR cspPskcCertSubjName	1.3.6.1.4.1.9.9.370.1.4.1.1.9	SnmpAdminString	read-only	The subject name of the certificate assigned to the proxy service. If there is no subject name on the certificate, this will be a NULL string.
ROW cspPskcConfigRowStatus	1.3.6.1.4.1.9.9.370.1.4.1.1.15	RowStatus	read-create	The conceptual row status of the proxy service key and certificate configuration entry. This entry can be modified when the status is 'active'.
STR cspPskcIssuerCertSerialNum	1.3.6.1.4.1.9.9.370.1.4.1.1.12	SnmpAdminString	read-only	The serial number of the issuer's certificate. If the serial number of the issuer's certificate is not known, this will be a NULL string.
STR cspPskcIssuerName	1.3.6.1.4.1.9.9.370.1.4.1.1.11	SnmpAdminString	read-only	The issuer name of the certificate assigned to the proxy service. If the issuer name of the certificate is not known, this will be a NULL string.
STR cspPskcKeyFileName	1.3.6.1.4.1.9.9.370.1.4.1.1.5	SnmpAdminString	read-create	The name of the file storing the key. If there is no such file, the name will be a NULL string.
STR cspPskcKeyName	1.3.6.1.4.1.9.9.370.1.4.1.1.4	SnmpAdminString	read-create	The name of a key assigned to the proxy service. If there is no key assigned, the name will be a NULL string. If the key is stored in a file, the file name may be used to identify the key, and this name will be a NULL string.
INT cspPskcKeySize	1.3.6.1.4.1.9.9.370.1.4.1.1.6	INTEGER	read-only	The size of the key. The following modulus sizes are defined for RSA keys: 512-bit, 768-bit, 1024-bit, 1536-bit and 2048-bit.
STR cspPskcKeyTime	1.3.6.1.4.1.9.9.370.1.4.1.1.7	SnmpAdminString	read-only	The time of generation of the key, if known. If the key is imported to the proxy device, this time can indicate the time of import if the time of generation is unknown. If the time is not known, this will be a NULL string.
INT cspPskcKeyUsage	1.3.6.1.4.1.9.9.370.1.4.1.1.1	INTEGER	not-accessible	An indication of the usage of a key assigned to a proxy service. Each proxy service can be assigned one or more keys. The key can be used for signing only, for data encryption and decryption only, or for general purpose (that is, it can be used for both signing and data encryption and decryption). The following values are defined: rsaSigning(1) : RSA key used for signing only, rsaEncryption(2) : RSA key used for data encryption and decryption only, rsaGeneralPurpose(3): RSA key used for both signing and data encryption and decryption.
STR cspPskcTrustPointName	1.3.6.1.4.1.9.9.370.1.4.1.1.2	SnmpAdminString	read-create	The name of a trust point assigned to the proxy service. The trust point contains information that can be used for certificate enrollment or for importing keys and certificates. A trust point may also contain identifying information about keys and certificates, and the path and the protocol to be used for the proxy device to communicate with a Certificate Authority which issues certificates for the proxy service. If no trust point is assigned to the proxy service, the name will be a NULL string.
cspPsKeyCertConfig	1.3.6.1.4.1.9.9.370.1.4
cspPsKeyCertEntry	1.3.6.1.4.1.9.9.370.1.4.1.1		not-accessible	The proxy service key and certificate configuration entry. This entry specifies the key usage, optionally the trust point name, the certificate and the key file names, the key size and time of generation or import, and some important attributes of the certificate.
cspPsKeyCertTable	1.3.6.1.4.1.9.9.370.1.4.1		not-accessible	A list of proxy service key and certificate configuration entries.
I32 cspPsListIndex	1.3.6.1.4.1.9.9.370.1.2.1.1.2	Integer32	not-accessible	The unique index of a proxy service within a list. If the cspPsName string is assigned to a list of proxy services, this index is used to identify a proxy service within the list. If the cspPsName string is unique per proxy service, this index is not used, and the value shall be 0.
STR cspPsName	1.3.6.1.4.1.9.9.370.1.2.1.1.1	SnmpAdminString	not-accessible	The name of a proxy service. A unique name string can be assigned to one proxy service or a list of proxy services. When the name is assigned to a list of proxy services, each proxy service is identified by a unique index within the list.
INT cspPsOperDownReason	1.3.6.1.4.1.9.9.370.1.2.1.1.12	INTEGER	read-only	The reason for the operational status to be 'down'. Possible values are: other(1) : Unknown or undefined reason, notApplicable(2) : Administratively 'down', noConnectivity(3) : No Connectivity to the client, the server, or the gateway, noVirtualAddr(4) : Virtual Address not configured, noServerAddr(5) : Server Address not configured, noCert(6) : Certificate configured, but invalid or missing, certNotConfigured(7): Certificate not configured.
INT cspPsOperStatus	1.3.6.1.4.1.9.9.370.1.2.1.1.11	INTEGER	read-only	The operational status of a proxy service. For a proxy service to be operational, its administrative status needs to be 'up'. If the administrative status is 'up', the operational status will be changed from 'down' to 'up' automatically once all the required configuration parameters and resources, including necessary keys and certificates, become available. If one or more required resources are removed (e.g. the certificate has expired), the operational status will be changed to 'down' automatically.
STR cspPspHttpHdrPolicyName	1.3.6.1.4.1.9.9.370.1.3.1.1.4	SnmpAdminString	read-create	The name of the HTTP header insertion policy. A number of fields can be inserted into the HTTP headers when the proxy service is forwarding data. The policy specifies the header insertion parameters. If no policy is configured, the name will be a NULL string.
cspPsPolicyConfig	1.3.6.1.4.1.9.9.370.1.3
cspPsPolicyEntry	1.3.6.1.4.1.9.9.370.1.3.1.1		not-accessible	The proxy service policy entry. Each proxy service policy entry contains the name of each type of policy configured for the proxy service. A policy is a set of configuration parameters and rules to observe for implementing a protocol or an operation. One or more of the following policies can be configured for a proxy service: TCP protocol policy for virtual connections, TCP protocol policy for server connections, SSL protocol policy, HTTP header insertion policy, and URL rewrite policy.
cspPsPolicyTable	1.3.6.1.4.1.9.9.370.1.3.1		not-accessible	A list of proxy service policy configuration entries.
STR cspPspSerTcpPolicyName	1.3.6.1.4.1.9.9.370.1.3.1.1.2	SnmpAdminString	read-create	The name of the TCP protocol policy configured for the server side connections. If no TCP policy is configured, the name will be a NULL string.
STR cspPspSslPolicyName	1.3.6.1.4.1.9.9.370.1.3.1.1.3	SnmpAdminString	read-create	The name of the SSL protocol policy configured for the SSL handshake and data encryption and decryption. If no SSL policy is configured, the name will be a NULL string.
STR cspPspUrlRewritePolicyName	1.3.6.1.4.1.9.9.370.1.3.1.1.5	SnmpAdminString	read-create	The name of the URL rewrite policy. The policy specifies configuration parameters for rewriting URLs in HTTP headers and payload. If no policy is configured, the name will be a NULL string.
STR cspPspVirTcpPolicyName	1.3.6.1.4.1.9.9.370.1.3.1.1.1	SnmpAdminString	read-create	The name of the TCP protocol policy configured for the virtual side connections. If no TCP policy is configured, the name will be a NULL string.
IP cspPsServerAddress	1.3.6.1.4.1.9.9.370.1.2.1.1.8	InetAddress	read-create	The server address. This address is used by the proxy device to send or forward data to the destination.
IPt cspPsServerAddressType	1.3.6.1.4.1.9.9.370.1.2.1.1.7	InetAddressType	read-create	An indication of the type of address contained in cspPsServerAddress.
CIS cspPsServerPort	1.3.6.1.4.1.9.9.370.1.2.1.1.9	CiscoPort	read-create	The server TCP port number. This port number is used by the proxy device to send or forward data to the destination.
INT cspPsServiceType	1.3.6.1.4.1.9.9.370.1.2.1.1.3	INTEGER	read-create	The type of proxy service: 'server(1)' or 'client(2)'. When servicing a 'server' type proxy service, the proxy device acts as a SSL server. It terminates the SSL handshake initiated by a SSL client, and forwards the data sent from the client to the destination. When servicing a 'client' type proxy service, the proxy device acts as a SSL client. It initiates a SSL handshake to a SSL server, and forwards data sent from one or more data sources to the SSL server.
cspPsSsl3CounterEntry	1.3.6.1.4.1.9.9.370.1.16.1.1		not-accessible	The proxy service SSL 3.0 counter entry. This entry reports the counters collected about the SSL 3.0 protocol for each proxy service.
cspPsSsl3Counters	1.3.6.1.4.1.9.9.370.1.16
cspPsSsl3CountersTable	1.3.6.1.4.1.9.9.370.1.16.1		not-accessible	A list of proxy service SSL 3.0 counter entries.
cspPsTable	1.3.6.1.4.1.9.9.370.1.2.1		not-accessible	A list of proxy service configuration entries.
cspPsTls1CounterEntry	1.3.6.1.4.1.9.9.370.1.17.1.1		not-accessible	The proxy service TLS 1.0 counter entry. This entry displays counters collected about the TLS 1.0 protocol for each proxy service.
cspPsTls1Counters	1.3.6.1.4.1.9.9.370.1.17
cspPsTls1CountersTable	1.3.6.1.4.1.9.9.370.1.17.1		not-accessible	A list of proxy service TLS 1.0 counter entries.
IP cspPsVirtualAddress	1.3.6.1.4.1.9.9.370.1.2.1.1.5	InetAddress	read-create	The virtual address. This address is used by the data source to send data that can be received by the proxy device and forwarded to the destination.
IPt cspPsVirtualAddressType	1.3.6.1.4.1.9.9.370.1.2.1.1.4	InetAddressType	read-create	An indication of the type of address contained in cspPsVirtualAddress.
CIS cspPsVirtualPort	1.3.6.1.4.1.9.9.370.1.2.1.1.6	CiscoPort	read-create	The virtual TCP port number. This port number is used by the data source to send data that can be received by the proxy device and forwarded to the destination.
C32 cspPt1cBadMacRcvd	1.3.6.1.4.1.9.9.370.1.17.1.1.6	Counter32	read-only	The total number of received TLS 1.0 records which have bad MAC (Message Authentication Code).
TIM cspPt1cClearTime	1.3.6.1.4.1.9.9.370.1.17.1.1.1	TimeStamp	read-only	The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
C32 cspPt1cDataFailed	1.3.6.1.4.1.9.9.370.1.17.1.1.5	Counter32	read-only	The total number of TLS 1.0 connections failed in data phase.
C32 cspPt1cFullHandShake	1.3.6.1.4.1.9.9.370.1.17.1.1.2	Counter32	read-only	The total number of TLS 1.0 full handshakes completed.
C32 cspPt1cHandShakeFailed	1.3.6.1.4.1.9.9.370.1.17.1.1.4	Counter32	read-only	The total number of TLS 1.0 connections failed in handshake phase.
C32 cspPt1cPadErrors	1.3.6.1.4.1.9.9.370.1.17.1.1.7	Counter32	read-only	The total number of received TLS 1.0 records which have pad errors.
C32 cspPt1cResumedHandShake	1.3.6.1.4.1.9.9.370.1.17.1.1.3	Counter32	read-only	The total number of TLS 1.0 resumed handshakes completed.
C32 cspPt1cRSA3desedecbcsha	1.3.6.1.4.1.9.9.370.1.17.1.1.11	Counter32	read-only	The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
C32 cspPt1cRSAdescbcsha	1.3.6.1.4.1.9.9.370.1.17.1.1.10	Counter32	read-only	The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_DES_CBC_SHA.
C32 cspPt1cRSArc4128md5	1.3.6.1.4.1.9.9.370.1.17.1.1.8	Counter32	read-only	The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_RC4_128_MD5.
C32 cspPt1cRSArc4128sha	1.3.6.1.4.1.9.9.370.1.17.1.1.9	Counter32	read-only	The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_RC4_128_SHA.
C32 cspS3cBadMacRcvd	1.3.6.1.4.1.9.9.370.1.11.5	Counter32	read-only	The total number of received SSL 3.0 records which have bad MAC (Message Authentication Code).
C32 cspS3cDataFailed	1.3.6.1.4.1.9.9.370.1.11.4	Counter32	read-only	The total number of SSL 3.0 sessions failed in data phase.
C32 cspS3cFullHandShake	1.3.6.1.4.1.9.9.370.1.11.1	Counter32	read-only	The total number of full SSL 3.0 handshakes completed.
C32 cspS3cHandShakeFailed	1.3.6.1.4.1.9.9.370.1.11.3	Counter32	read-only	The total number of SSL 3.0 connections failed in handshake phase.
C32 cspS3cPadErrors	1.3.6.1.4.1.9.9.370.1.11.6	Counter32	read-only	The total number of received SSL 3.0 records which have pad errors.
C32 cspS3cResumedHandShake	1.3.6.1.4.1.9.9.370.1.11.2	Counter32	read-only	The total number of SSL 3.0 resumed handshakes completed.
C32 cspS3cRSA3desedecbcsha	1.3.6.1.4.1.9.9.370.1.11.10	Counter32	read-only	The total number of SSL 3.0 connections which used cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
C32 cspS3cRSAdescbcsha	1.3.6.1.4.1.9.9.370.1.11.9	Counter32	read-only	The total number of SSL 3.0 connections which used cipher suite RSA_WITH_DES_CBC_SHA.
C32 cspS3cRSArc4128md5	1.3.6.1.4.1.9.9.370.1.11.7	Counter32	read-only	The total number of SSL 3.0 connections which used cipher suite RSA_WITH_RC4_128_MD5.
C32 cspS3cRSArc4128sha	1.3.6.1.4.1.9.9.370.1.11.8	Counter32	read-only	The total number of SSL 3.0 connections which used cipher suite RSA_WITH_RC4_128_SHA.
G32 cspScActiveSessions	1.3.6.1.4.1.9.9.370.1.10.7	Gauge32	read-only	The number of active SSL sessions. This number indicates the number of valid session entries in the session cache.
C32 cspSccBlksDecrypted	1.3.6.1.4.1.9.9.370.1.13.2	Counter32	read-only	The total number of data blocks that got decrypted.
C32 cspSccBlksEncrypted	1.3.6.1.4.1.9.9.370.1.13.1	Counter32	read-only	The total number of data blocks that got encrypted.
C32 cspSccBytesDecrypted	1.3.6.1.4.1.9.9.370.1.13.4	Counter32	read-only	The total number of bytes that got decrypted.
C32 cspSccBytesEncrypted	1.3.6.1.4.1.9.9.370.1.13.3	Counter32	read-only	The total number of bytes that got encrypted.
C32 cspSccCryptoFails	1.3.6.1.4.1.9.9.370.1.13.7	Counter32	read-only	The total number of failed cryptographic operations.
C32 cspSccDmaErrors	1.3.6.1.4.1.9.9.370.1.13.8	Counter32	read-only	The total number of cryptographic device DMA errors.
C32 cspScConnAttempt	1.3.6.1.4.1.9.9.370.1.10.1	Counter32	read-only	The total number of SSL connections attempted.
C32 cspScConnComplete	1.3.6.1.4.1.9.9.370.1.10.2	Counter32	read-only	The total number of SSL connections completed.
G32 cspScConnInDataPhase	1.3.6.1.4.1.9.9.370.1.10.4	Gauge32	read-only	The number of SSL connections currently in data phase.
G32 cspScConnInHandShake	1.3.6.1.4.1.9.9.370.1.10.3	Gauge32	read-only	The number of SSL connections currently in handshake phase.
G32 cspScConnInReneg	1.3.6.1.4.1.9.9.370.1.10.6	Gauge32	read-only	The number of SSL connections currently in renegotiation phase
C32 cspSccPrivateKeyOpers	1.3.6.1.4.1.9.9.370.1.13.6	Counter32	read-only	The total number of RSA private key operations performed.
C32 cspSccPublicKeyOpers	1.3.6.1.4.1.9.9.370.1.13.5	Counter32	read-only	The total number of RSA public key operations performed.
G32 cspScCurrDeviceQLen	1.3.6.1.4.1.9.9.370.1.10.9	Gauge32	read-only	The current device queue length. Indicates the number of requests pending with the device.
G32 cspScMaxDeviceQLen	1.3.6.1.4.1.9.9.370.1.10.10	Gauge32	read-only	The maximum device queue length recorded. Indicates the maximum number of requests queued to the device at any point of time.
G32 cspScMaxHandShakeConns	1.3.6.1.4.1.9.9.370.1.10.8	Gauge32	read-only	This indicates the maximum number of connections present in handshake phase at any point of time
C32 cspScRenegAttempt	1.3.6.1.4.1.9.9.370.1.10.5	Counter32	read-only	The total number of SSL renegotiations attempted.
C32 cspScSessionReuses	1.3.6.1.4.1.9.9.370.1.10.11	Counter32	read-only	The number of session reuses. Indicates the number of times the sessions got reused before the session timer expired.
C32 cspSecAlertSendFailed	1.3.6.1.4.1.9.9.370.1.14.17	Counter32	read-only	The total number of failure to send alerts. This is typically because of the memory allocation failure.
C32 cspSecBuffAllocFailed	1.3.6.1.4.1.9.9.370.1.14.16	Counter32	read-only	The total number of times buffer allocation failed.
C32 cspSecConnAborted	1.3.6.1.4.1.9.9.370.1.14.19	Counter32	read-only	The total number of SSL connections aborted.
C32 cspSecDevConnCtxtFail	1.3.6.1.4.1.9.9.370.1.14.14	Counter32	read-only	The total number of times device context could not be allocated.
C32 cspSecFatalAlertsRcvd	1.3.6.1.4.1.9.9.370.1.14.5	Counter32	read-only	The total number of fatal alerts received.
C32 cspSecFatalAlertsSent	1.3.6.1.4.1.9.9.370.1.14.6	Counter32	read-only	The total number of fatal alerts sent.
C32 cspSecHShakeHndleMemFail	1.3.6.1.4.1.9.9.370.1.14.10	Counter32	read-only	The total number of handshake handle memory allocation failure.
C32 cspSecHShakeInitFailed	1.3.6.1.4.1.9.9.370.1.14.3	Counter32	read-only	The total number of times SSL connections failed even before the handshake phase got started. This typically indicates that there is some connectivity problem with the server.
C32 cspSecHShakeLimitExceed	1.3.6.1.4.1.9.9.370.1.14.13	Counter32	read-only	The total number of times simultaneous handshake connection exceeded the capacity. The new connections will be rejected if the total number of simultaneous handshake connections exceeds the limit.
C32 cspSecMemAllocFailed	1.3.6.1.4.1.9.9.370.1.14.15	Counter32	read-only	The total number of times memory allocation failed.
C32 cspSecNoCipherAlerts	1.3.6.1.4.1.9.9.370.1.14.7	Counter32	read-only	The total number of ALERT_HANDSHAKE_FAIL alerts sent due to unsupported cipher suites.
C32 cspSecNoComprsnAlerts	1.3.6.1.4.1.9.9.370.1.14.9	Counter32	read-only	The total number of ALERT_HANDSHAKE_FAIL alerts sent due to unsupported compression scheme.
C32 cspSecOverloadDropped	1.3.6.1.4.1.9.9.370.1.14.18	Counter32	read-only	The total number of connections rejected because of overload conditions. This indicates that the incoming rate is higher than what can be handled.
C32 cspSecRenegFailed	1.3.6.1.4.1.9.9.370.1.14.4	Counter32	read-only	The total number of times SSL renegotiation failed.
C32 cspSecServiceIdDiscard	1.3.6.1.4.1.9.9.370.1.14.12	Counter32	read-only	The total number of connections rejected because of invalid service identifiers.
C32 cspSecSessAllocFailed	1.3.6.1.4.1.9.9.370.1.14.1	Counter32	read-only	The total number of times SSL session could not be allocated.
C32 cspSecSessLimitExceed	1.3.6.1.4.1.9.9.370.1.14.2	Counter32	read-only	The total number of times configured SSL session limit got exceeded. The new connections will be rejected if the session limit is exceeded.
C32 cspSecStalePakDrop	1.3.6.1.4.1.9.9.370.1.14.11	Counter32	read-only	The total number of stale packets dropped. Indicates the number of packets received after the SSL connection is torn down.
C32 cspSecVerMismatchAlerts	1.3.6.1.4.1.9.9.370.1.14.8	Counter32	read-only	The total number of ALERT_PROTOCOL_VERSION alerts sent due to unsupported version number.
NTF cspServCertExpiring	1.3.6.1.4.1.9.9.370.0.2			The proxy service certificate expiring notification. If the time interval cspGcPSCertExpireInterval is positive, and cspGcNotifyPSCertExpiring is 'true', a notification will be issued for every proxy service certificate that will be expiring within this time interval. This notification is issued only once for each of these certificates. If the interval is changed from a positive value to 0, the proxy device will clear its memory of notification issued in the past, and stop issuing new notification. The notification contains the subject name, the serial number and the issuer name of the certificate, the serial number of the issuer's certificate, and the end date on the certificate.
NTF cspServOperStatus	1.3.6.1.4.1.9.9.370.0.1			The proxy service operation status change notification. When the Operation Status of a proxy service changes, and cspGcNotifyProxyServOperStatus is 'true', a notification will be issued. The notification contains the current operation status and the down reason of the proxy service.
T/F cspSpCloseProtocol	1.3.6.1.4.1.9.9.370.1.6.1.1.7	TruthValue	read-create	An indication of whether or not the SSL close protocol is enforced. If 'true', the close protocol is enforced. A close-notify alert message is sent to the peer, and a close-notify alert message is expected from the peer. If 'false', the close protocol is not enforced. The proxy service sends a close-notify alert message to the peer; however, the proxy service does not expect a close-notify alert from the peer before tearing down the session.
ROW cspSpConfigRowStatus	1.3.6.1.4.1.9.9.370.1.6.1.1.10	RowStatus	read-create	The row status of the SSL policy configuration entry. This entry can be modified when the status is 'active'.
STR cspSpPolicyName	1.3.6.1.4.1.9.9.370.1.6.1.1.1	SnmpAdminString	not-accessible	The unique name of a SSL protocol policy.
INT cspSpProtocol	1.3.6.1.4.1.9.9.370.1.6.1.1.6	INTEGER	read-create	The set of SSL and TLS protocols to be supported. The following values are defined: other(1) : An unspecified protocol, SSL 3.0(2) : Support SSL 3.0 protocol only, TLS 1.0(3) : Support TLS 1.0 protocol only, ssl3AndTls1(3) : Support both SSL 3.0 and TLS 1.0
T/F cspSpRSA3descbcsha	1.3.6.1.4.1.9.9.370.1.6.1.1.5	TruthValue	read-create	An indication of whether or not the cipher suite RSA_WITH_3DES_EDE_CBC_SHA is configured. If 'true', the cipher suite is configured.
T/F cspSpRSAdescbcsha	1.3.6.1.4.1.9.9.370.1.6.1.1.4	TruthValue	read-create	An indication of whether or not the cipher suite RSA_WITH_DES_CBC_SHA is configured. If 'true', the cipher suite is configured.
T/F cspSpRSArc4128md5	1.3.6.1.4.1.9.9.370.1.6.1.1.2	TruthValue	read-create	An indication of whether or not the cipher suite RSA_WITH_RC4_128_MD5 is configured. If 'true', the cipher suite is configured.
T/F cspSpRSArc4128sha	1.3.6.1.4.1.9.9.370.1.6.1.1.3	TruthValue	read-create	An indication of whether or not the cipher suite RSA_WITH_RC4_128_SHA is configured. If 'true', the cipher suite is configured.
I32 cspSpSessionCache	1.3.6.1.4.1.9.9.370.1.6.1.1.8	Integer32	read-create	The SSL session cache size. The session cache is used to store a number of most recently used session identifiers. Session identifiers can be reused if a new connection requests to use a session identifier that is found in the cache. This object specifies the maximum size of the cache.
I32 cspSpSessionTimeOut	1.3.6.1.4.1.9.9.370.1.6.1.1.9	Integer32	read-create	The SSL session timeout value. The session entry will be removed from the session cache after the configured timeout. Once the session entry is removed, subsequent connections cannot reuse the session. If this timeout value is 0, entries in the session cache will not timeout.
cspSsl3Counters	1.3.6.1.4.1.9.9.370.1.11
cspSsl3Group	1.3.6.1.4.1.9.9.370.2.2.6			A collection of SSL 3.0 protocol statistics.
G32 cspSslActiveConn	1.3.6.1.4.1.9.9.370.1.21.3	Gauge32	read-only	This object indicates the active SSL (SSLv3 and TLSv1) connections per system.
U32 cspSslActiveConnPcnt	1.3.6.1.4.1.9.9.370.1.21.5	Unsigned32	read-only	This object indicates the percentage of the active SSL connections per system based on cspSslActiveConn. The notification will be send when the cspSslActiveConnPcnt count exceeds cspSslConfigHighConnPcnt.
U32 cspSslConfigHighConnPcnt	1.3.6.1.4.1.9.9.370.1.21.4	Unsigned32	read-write	This object specifies the percentage of the maximum SSL connections per system as configured by the user.
U32 cspSslConfigWatermarkConnPcnt	1.3.6.1.4.1.9.9.370.1.21.6	Unsigned32	read-write	This object specifies the SSL connections watermark threshold value (in percentage) per system allowed as configured by the user. The value of cspSslConfigWatermarkPcnt should be less than cspSslConfigHighConnPcnt.
cspSslCounters	1.3.6.1.4.1.9.9.370.1.10
TIM cspSslCountersClearTime	1.3.6.1.4.1.9.9.370.1.9.1	TimeStamp	read-only	The last time when the SSL counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
cspSslCountersInfo	1.3.6.1.4.1.9.9.370.1.9
cspSslCryptoCounters	1.3.6.1.4.1.9.9.370.1.13
cspSslCryptoGroup	1.3.6.1.4.1.9.9.370.2.2.8			A collection of cryptographic statistics.
cspSslErrorCounters	1.3.6.1.4.1.9.9.370.1.14
cspSslErrorGroup	1.3.6.1.4.1.9.9.370.2.2.9			A collection of SSL protocol error counters.
cspSslGroup	1.3.6.1.4.1.9.9.370.2.2.5			A collection of SSL handshake protocol statistics.
U32 cspSslMaxConn	1.3.6.1.4.1.9.9.370.1.21.2	Unsigned32	read-write	This object specifies the maximum allowed SSL (SSLv3 and TLSv1) connections per system as configured by the user.
cspSslPolicyConfig	1.3.6.1.4.1.9.9.370.1.6
cspSslPolicyEntry	1.3.6.1.4.1.9.9.370.1.6.1.1		not-accessible	A SSL policy defines a set of cipher suites to be supported, and the SSL or TLS protocol parameters. Each policy can be assigned to one or more proxy services. If no SSL policy is assigned to a proxy service, all supported cipher suites and all protocol versions will be enabled by default.
cspSslPolicyTable	1.3.6.1.4.1.9.9.370.1.6.1		not-accessible	A list of SSL protocol policy configuration entries.
cspSslResourceLimitNotifGroup	1.3.6.1.4.1.9.9.370.2.2.19			A collection of notifications for signaling important resource limit exceed signalling.
cspSslResourceLimitNotifObjectsGroup	1.3.6.1.4.1.9.9.370.2.2.18			Collection of the objects for connection notification related configuration and information.
NTF cspSSLResourceLimitReached	1.3.6.1.4.1.9.9.370.0.3			This notification is issued on the following scenarios: 1) When the value of cpsSslActiveConnPcnt exceeds the value of cspSslConfigHighConnPcnt 2) When the value of cpsSslActiveConn falls below the watermark value represented by cspSslConfigWatermarkPcnt.
cspSslResourceNotifInfo	1.3.6.1.4.1.9.9.370.1.21
INT cspSslTrapType	1.3.6.1.4.1.9.9.370.1.21.1	INTEGER	accessible-for-notify	This object indicates the type of trap issued by cspSSLResourceLimitReached notification.
C32 cspTcByteRcvSeq	1.3.6.1.4.1.9.9.370.1.8.13	Counter32	read-only	The total amount of data received in sequence.
C32 cspTcConnAccept	1.3.6.1.4.1.9.9.370.1.8.2	Counter32	read-only	The total number of TCP connections accepted by the proxy device.
C32 cspTcConnClosed	1.3.6.1.4.1.9.9.370.1.8.5	Counter32	read-only	The total number of TCP connections closed.
C32 cspTcConnDrop	1.3.6.1.4.1.9.9.370.1.8.4	Counter32	read-only	The total number of TCP connections dropped.
C32 cspTcConnEstab	1.3.6.1.4.1.9.9.370.1.8.3	Counter32	read-only	The total number of TCP connections established.
C32 cspTcConnInitEx	1.3.6.1.4.1.9.9.370.1.8.1	Counter32	read-only	The total number of TCP connections initiated by the proxy device.
C32 cspTcDataByteSent	1.3.6.1.4.1.9.9.370.1.8.10	Counter32	read-only	The total amount of data sent.
C32 cspTcDataPktSent	1.3.6.1.4.1.9.9.370.1.8.9	Counter32	read-only	The total number of TCP data packets sent.
C32 cspTcIdleTimeOuts	1.3.6.1.4.1.9.9.370.1.8.7	Counter32	read-only	The total number of idle timeouts.
cspTcpCounters	1.3.6.1.4.1.9.9.370.1.8
TIM cspTcpCountersClearTime	1.3.6.1.4.1.9.9.370.1.7.1	TimeStamp	read-only	The last time when the TCP counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
cspTcpCountersInfo	1.3.6.1.4.1.9.9.370.1.7
cspTcpGroup	1.3.6.1.4.1.9.9.370.2.2.4			A collection of TCP protocol objects.
C32 cspTcPktRcvSeq	1.3.6.1.4.1.9.9.370.1.8.12	Counter32	read-only	The total number of TCP data packets received in sequence.
cspTcpPolicyConfig	1.3.6.1.4.1.9.9.370.1.5
cspTcpPolicyEntry	1.3.6.1.4.1.9.9.370.1.5.1.1		not-accessible	TCP Policy configuration entry. Each entry defines a set of TCP protocol parameters. A policy can be applied to one or more proxy services.
cspTcpPolicyTable	1.3.6.1.4.1.9.9.370.1.5.1		not-accessible	A list of TCP Policy entries
C32 cspTcSynTimeOuts	1.3.6.1.4.1.9.9.370.1.8.6	Counter32	read-only	The total number of SYN timeouts.
C32 cspTcTotalPktRcv	1.3.6.1.4.1.9.9.370.1.8.11	Counter32	read-only	The total number of TCP packets received.
C32 cspTcTotalPktSent	1.3.6.1.4.1.9.9.370.1.8.8	Counter32	read-only	The total number of TCP packets sent.
C32 cspTlcBadMacRcvd	1.3.6.1.4.1.9.9.370.1.12.5	Counter32	read-only	The total number of received TLS 1.0 records which have bad MAC (Message Authentication Code.
C32 cspTlcDataFailed	1.3.6.1.4.1.9.9.370.1.12.4	Counter32	read-only	The total number of TLS 1.0 connections failed in data phase.
C32 cspTlcFullHandShake	1.3.6.1.4.1.9.9.370.1.12.1	Counter32	read-only	The total number of full TLS 1.0 handshakes completed.
C32 cspTlcHandShakeFailed	1.3.6.1.4.1.9.9.370.1.12.3	Counter32	read-only	The total number of TLS 1.0 connections failed in handshake phase.
C32 cspTlcPadErrors	1.3.6.1.4.1.9.9.370.1.12.6	Counter32	read-only	The total number of received TLS 1.0 records which have pad errors.
C32 cspTlcResumedHandShake	1.3.6.1.4.1.9.9.370.1.12.2	Counter32	read-only	The total number of resumed TLS 1.0 handshakes completed.
C32 cspTlcRSA3desedecbcsha	1.3.6.1.4.1.9.9.370.1.12.10	Counter32	read-only	The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
C32 cspTlcRSAdescbcsha	1.3.6.1.4.1.9.9.370.1.12.9	Counter32	read-only	The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_DES_CBC_SHA.
C32 cspTlcRSArc4128md5	1.3.6.1.4.1.9.9.370.1.12.7	Counter32	read-only	The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_RC4_128_MD5.
C32 cspTlcRSArc4128sha	1.3.6.1.4.1.9.9.370.1.12.8	Counter32	read-only	The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_RC4_128_SHA.
cspTls1Counters	1.3.6.1.4.1.9.9.370.1.12
cspTls1Group	1.3.6.1.4.1.9.9.370.2.2.7			A collection of TLS 1.0 protocol statistics.
ROW cspTpConfigRowStatus	1.3.6.1.4.1.9.9.370.1.5.1.1.11	RowStatus	read-create	The conceptual row status of the TCP policy configuration entry. This entry can be modified when the status is 'active'.
I32 cspTpFinWaitTimeOut	1.3.6.1.4.1.9.9.370.1.5.1.1.5	Integer32	read-create	The TCP connection FIN-WAIT2 state timeout value. This is the amount of time the SSL proxy waits for a FIN from the peer after it has initiated close and is in FIN-WAIT2 state.
I32 cspTpInActivityTimeOut	1.3.6.1.4.1.9.9.370.1.5.1.1.3	Integer32	read-create	The TCP connection inactivity timeout value. This is the amount of time the SSL proxy waits for the next packet to arrive on a TCP connection, if no packet is received within this period then the connection is considered to be inactive and aborted.
I32 cspTpMss	1.3.6.1.4.1.9.9.370.1.5.1.1.9	Integer32	read-create	The TCP maximum segment size. This is the MSS value offered by the SSL proxy during 3-way handshake
T/F cspTpNagleAlgo	1.3.6.1.4.1.9.9.370.1.5.1.1.4	TruthValue	read-create	If 'true', the Nagle Algorithm is enabled during the SSL or TLS data phase to concatenate a number of small messages to avoid sending small messages into the network.
T/F cspTpPathMtuDisc	1.3.6.1.4.1.9.9.370.1.5.1.1.10	TruthValue	read-create	If 'true', the Path MTU Discovery algorithm is enabled.
STR cspTpPolicyName	1.3.6.1.4.1.9.9.370.1.5.1.1.1	SnmpAdminString	not-accessible	The unique name of a TCP policy.
I32 cspTpRcvBufShrLim	1.3.6.1.4.1.9.9.370.1.5.1.1.7	Integer32	read-create	The receive buffer share limit per connection. This is used by SSL proxy to calculate the maximum window to advertise during the 3 way handshake, and is also the maximum share of the receive buffer pool that would be allocated for this connection.
I32 cspTpReassemTimeOut	1.3.6.1.4.1.9.9.370.1.5.1.1.6	Integer32	read-create	The TCP connection reassembly timeout value. This is the amount of time the SSL proxy waits during the TCP out of order traffic reassembly process for the next expected in sequence segment to arrive.
I32 cspTpSynTimeOut	1.3.6.1.4.1.9.9.370.1.5.1.1.2	Integer32	read-create	The TCP connection SYN timeout value. This is the amount of time the SSL proxy waits before failing the connection establishment attempt.
I32 cspTpTransBufShrLim	1.3.6.1.4.1.9.9.370.1.5.1.1.8	Integer32	read-create	The transmit buffer share limit per connection. This is the maximum share of the send buffer pool that would be allocated for this connection.

RFC description

Manages Cisco SSL/TLS proxy device for terminating and accelerating SSL transactions. Supports SSL server and client proxy modes with optional re-encryption.

Start monitoring Cisco SSL proxy/offload appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-SSL-PROXY-MIB