CISCO-UNIFIED-FIREWALL-MIB :: cufwAaicDeniedFlowEvCount

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-UNIFIED-FIREWALL-MIBcufwAaicDeniedFlowEvCount

cufwAaicDeniedFlowEvCount

Module: CISCO-UNIFIED-FIREWALL-MIB

OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount

OID (numeric): 1.3.6.1.4.1.9.9.491.1.5.3.1.10

Node type: OBJECT-TYPE

Type: Counter64

Access: read-only

Description: The Lina process sends denied flow events to Snort when it decides to drop a flow before sending it to Snort.

What is cufwAaicDeniedFlowEvCount?

This Counter64, in Event, counts denied-flow events the Lina process sends to Snort when it decides to drop a flow before ever forwarding it to Snort. An admin uses this to see how many flows are being rejected at the Lina layer itself, upstream of Snort inspection entirely. A rising count here would indicate Lina's own policy decisions, rather than Snort's inspection, are driving an increasing share of flow denials.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.1.10
snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.5.3.1.10.1
snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount.1

Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwAaicDeniedFlowEvCount OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.491ciscoUnifiedFirewallMIBCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1ciscoUnifiedFirewallMIBObjectsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.5cuFwAaicGrpCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.5.3cufwAaicEngineStatsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.5.3.1cufwAaicLinaSnortStatsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.5.3.1.10cufwAaicDeniedFlowEvCountCISCO-UNIFIED-FIREWALL-MIB