CISCOSB-SECURITY-SUITE

Description: Manages Cisco Small Business integrated security suite features including firewall and access control.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

CISCOSB-SECURITY-SUITE is a private Cisco Small Business MIB implementing an integrated security feature set, including known Denial-of-Service (DoS) attack signature blocking, SYN-flood protection, and IP address spoofing/martian-address filtering, on small-business switches and routers. It exposes a global enable switch alongside detailed tables listing each known DoS attack type, whether blocking is enabled for it, per-attack protocol/port details, and tables of reserved martian (invalid/reserved) IP addresses the device should never accept as legitimate traffic. Its monitoring value is centered on security/fault status: the global enable object confirms the whole feature is active, per-entry enable flags show which specific attack signatures are currently being blocked, and the table structure implies associated attack-detection details useful for spotting an ongoing DoS attempt against the device. It is a vendor-private MIB with no formal dependency on standard IETF MIBs, implementing security concepts general to network intrusion/DoS protection. It is deployed on Cisco Small Business switches and routers as a perimeter/first-line defense against common network-layer attacks. Engineers can download the CISCOSB-SECURITY-SUITE file directly to load it into their MIB browser.

An administrator would check rlSecuritySuiteGlobalEnable to confirm the security suite is active, then walk rlSecuritySuiteKnownDoSAttacksTable/rlSecuritySuiteKnownDoSAttacksEntry to see which rlSecuritySuiteKnownDoSAttack signatures have rlSecuritySuiteKnownDoSAttackEnable set, and cross-reference rlSecuritySuiteKnownDoSAttacksDetailsTable for the specific rlSecuritySuiteKnownDoSAttackProtocl and rlSecuritySuiteKnownDoSAttackSrcTcpUdpPort/DestTcpUdpPort each signature matches against. A spike in blocked-attack activity correlated with one of these entries would indicate the device is actively under a known DoS attack pattern. rlSecuritySuiteMartianAddrAllTable lets an operator confirm which reserved/invalid source addresses are being filtered, useful when diagnosing spoofed-traffic based attacks.

Provides DoS and intrusion detection configuration to block attacks on Cisco Small Business network switches.