All MIBs › CISCO-UNIFIED-FIREWALL-MIB › cufwUrlfAllowModeReqNumDenied
cufwUrlfAllowModeReqNumDenied
Module: CISCO-UNIFIED-FIREWALL-MIB
OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwUrlfAllowModeReqNumDenied
OID (numeric): 1.3.6.1.4.1.9.9.491.1.3.1.12
Node type: OBJECT-TYPE
Type: Counter64
Access: read-only
Description: The number of URL access requests that were declined by the firewall when the URL filtering server was not available.
This value is accumulated from the last reboot of the firewall.
What is cufwUrlfAllowModeReqNumDenied?
This Counter64, in Requests, counts URL access requests that were declined specifically because the URL filtering server was unavailable, accumulated since the last reboot, representing the opposite 'fail-closed' configuration from cufwUrlfAllowModeReqNumAllowed. An admin uses this to see how much traffic is being blocked purely due to filtering-server outages rather than policy decisions about the content itself. A rise here during a server outage would explain a surge in blocked web access unrelated to any actual policy violation.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.3.1.12 snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwUrlfAllowModeReqNumDenied
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.3.1.12.1 snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwUrlfAllowModeReqNumDenied.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cufwUrlfAllowModeReqNumDenied.1
Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwUrlfAllowModeReqNumDenied OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.491 | ciscoUnifiedFirewallMIB | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1 | ciscoUnifiedFirewallMIBObjects | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.3 | cuFwUrlFilterGrp | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.3.1 | cufwUrlFilterGlobals | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.3.1.12 | cufwUrlfAllowModeReqNumDenied | CISCO-UNIFIED-FIREWALL-MIB |