All MIBs › CISCO-UNIFIED-FIREWALL-MIB › cufwAaicDeniedFlowEvCount
cufwAaicDeniedFlowEvCount
Module: CISCO-UNIFIED-FIREWALL-MIB
OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount
OID (numeric): 1.3.6.1.4.1.9.9.491.1.5.3.1.10
Node type: OBJECT-TYPE
Type: Counter64
Access: read-only
Description: The Lina process sends denied flow events to Snort when it decides to drop a flow before sending it to Snort.
What is cufwAaicDeniedFlowEvCount?
This Counter64, in Event, counts denied-flow events the Lina process sends to Snort when it decides to drop a flow before ever forwarding it to Snort. An admin uses this to see how many flows are being rejected at the Lina layer itself, upstream of Snort inspection entirely. A rising count here would indicate Lina's own policy decisions, rather than Snort's inspection, are driving an increasing share of flow denials.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.1.10 snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.1.10.1 snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount.1
Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.491 | ciscoUnifiedFirewallMIB | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1 | ciscoUnifiedFirewallMIBObjects | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5 | cuFwAaicGrp | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3 | cufwAaicEngineStats | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3.1 | cufwAaicLinaSnortStats | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.5.3.1.10 | cufwAaicDeniedFlowEvCount | CISCO-UNIFIED-FIREWALL-MIB |