CISCO-UNIFIED-FIREWALL-MIB :: cufwConnGlobalNumEmbryonic

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsCISCO-UNIFIED-FIREWALL-MIBcufwConnGlobalNumEmbryonic

cufwConnGlobalNumEmbryonic

Module: CISCO-UNIFIED-FIREWALL-MIB

OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwConnGlobalNumEmbryonic

OID (numeric): 1.3.6.1.4.1.9.9.491.1.1.1.9

Node type: OBJECT-TYPE

Type: Gauge32

Access: read-only

Description: The number of embryonic application layer connections (that is, connections in which the signaling channel has been established while the data channel is awaiting setup).

This value is accumulated from the last reboot of the firewall.

What is cufwConnGlobalNumEmbryonic?

This gauge, accumulated since the last reboot, reports the number of embryonic application-layer connections -- ones where the signaling channel has been established but the associated data channel is still awaiting setup. An admin cares about this because protocols like SIP or FTP open a control channel first and a data channel afterward, and a backlog here can indicate an application-layer inspection or NAT problem preventing the data channel from completing. For example, a growing number of embryonic connections for a VoIP deployment would suggest calls are getting signaled but their media streams are failing to establish through the firewall.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.1.1.9
snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwConnGlobalNumEmbryonic

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.1.1.9.1
snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwConnGlobalNumEmbryonic.1

Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwConnGlobalNumEmbryonic OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.

OID Breakdown

Upper-level ancestors (8 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.9ciscoCAT2600-MIB
1.3.6.1.4.1.9.9ciscoMgmtCISCO-SMI
Numeric OIDNameModule
1.3.6.1.4.1.9.9.491ciscoUnifiedFirewallMIBCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1ciscoUnifiedFirewallMIBObjectsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.1cuFwConnectionGrpCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.1.1cuFwConnectionGlobalsCISCO-UNIFIED-FIREWALL-MIB
1.3.6.1.4.1.9.9.491.1.1.1.9cufwConnGlobalNumEmbryonicCISCO-UNIFIED-FIREWALL-MIB