CLAVISTER-MIB

All MIBs › CLAVISTER-MIB

Organization: Clavister AB

Last Updated: 2008-11-18

Category: VPN and Security, Vendor: Clavister

Description: Provides management objects for Clavister network security appliances including firewall and VPN status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CLAVISTER-MIB?

CLAVISTER-MIB is a vendor-specific MIB module from Clavister AB that exposes runtime statistics and operational state for Clavister CorePlus-based firewall/UTM appliances. Under the clvSystem subtree it reports system-level load and resource data (clvSysCpuLoad, clvSysMemUsage, clvSysBuffUse, clvSysConns, per-connection-state counters like clvSysPscTcpSyn/clvSysPscTcpOpen/clvSysPscUdp), per-interface traffic and ring-buffer statistics (clvIfStatsTable, clvIfRxRingTable, clvIfTxRingTable) plus VLAN counters (clvIfVlanStatsTable) and hardware sensor readings (clvHWSensorTable). Beyond core system health it covers the appliance's security and service functions: IPsec VPN tunnel negotiation counters (clvIPsecPhaseOneActive/Failed, clvIPsecQuickModeDone/Failed), firewall rule usage (clvRuleUseTable), DHCP server and IP pool utilization (clvIPPoolTable, clvDHCPRuleTable), authenticated user counts by protocol (clvUserAuthHTTPUsers, clvUserAuthXAUTHUsers), link-monitoring host reachability (clvLinkMonHostTable), and traffic-shaping pipe throughput (clvPipeTable). This breadth makes it useful for both capacity monitoring (CPU, memory, connection counts, pipe bandwidth) and security operational visibility (VPN negotiation failures, DHCP pool exhaustion, blocked-user auth attempts) on the same device. It depends on the CLAVISTER-SMI enterprise OID tree for its registration and is deployed on Clavister CorePlus firewall/VPN appliances; engineers instrumenting these boxes typically pull the whole MIB for CLAVISTER-MIB SNMP monitoring of both throughput and security-function health in one pass.

IPNetwork Monitor allows you to monitor SNMP objects defined in CLAVISTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Clavister CorePlus firewall/UTM/VPN appliances

Monitoring Examples

An operator polls clvSysCpuLoad and clvSysConns to track overall load and active connection count, watches clvIPsecPhaseOneFailed for a rising count of failed VPN negotiations, and checks clvIPPoolFree in clvIPPoolTable for a given pool; a falling clvIPPoolFree alongside rising clvIPPoolClientFails would indicate the DHCP/VPN client address pool is running out of addresses.

What Can Be Monitored

system CPU load, memory, and connection counters
per-interface traffic and Rx/Tx ring-buffer statistics
IPsec Phase-1/Quick Mode negotiation counters
firewall rule usage table entries
DHCP server rule and IP pool utilization
authenticated user counts by protocol (HTTP/XAUTH/PPP/EAP)

Imported Objects

From CLAVISTER-SMI

clavisterMibConfs	OBJECT-IDENTITY
clavisterMibModules	OBJECT-IDENTITY
clavisterMibObjectGroups	OBJECT-IDENTITY
clavisterOSStats	OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

DisplayString

How to Use in IPNetwork Monitor

Example using clvSysForwardedBits OID:

Select a Clavister CorePlus firewall/UTM/VPN appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type clvSysForwardedBits into the Find box to locate it in the OID tree, then select it and click OK. It reports the total number of forwarded bytes. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
clavisterStatsCompliance	1.3.6.1.4.1.5089.2.2.1.1			Module Compliance
clavisterStatsConformance	1.3.6.1.4.1.5089.2.2.1
clavisterStatsMibModule	1.3.6.1.4.1.5089.2.1.1			The MIB module for Clavister CorePlus products.
clavisterStatsRegGroups	1.3.6.1.4.1.5089.2.3.1
clvALG	1.3.6.1.4.1.5089.1.2.9
G32 clvAlgConnections	1.3.6.1.4.1.5089.1.2.9.2	Gauge32	read-only	Total ALG connections
clvAlgGroup	1.3.6.1.4.1.5089.2.3.1.13			Clavister HTTP ALG statistics group
G32 clvAlgSessions	1.3.6.1.4.1.5089.1.2.9.1	Gauge32	read-only	Total ALG sessions
G32 clvAlgTCPStreams	1.3.6.1.4.1.5089.1.2.9.3	Gauge32	read-only	Total ALG TCP streams
G32 clvDHCPActiveClients	1.3.6.1.4.1.5089.1.2.5.2.1.5	Gauge32	read-only	Number of currently active clients.
G32 clvDHCPActiveClientsPercent	1.3.6.1.4.1.5089.1.2.5.2.1.6	Gauge32	read-only	The number of currently active clients as a percentage of the pool size.
G32 clvDHCPRejectedRequests	1.3.6.1.4.1.5089.1.2.5.2.1.7	Gauge32	read-only	Number of rejected requests matching the current rule.
clvDHCPRelay	1.3.6.1.4.1.5089.1.2.11
G32 clvDHCPRelayCurClients	1.3.6.1.4.1.5089.1.2.11.1	Gauge32	read-only	Total DHCP relay active relayed clients.
G32 clvDHCPRelayCurTrans	1.3.6.1.4.1.5089.1.2.11.2	Gauge32	read-only	Ongoing DHCP relay transactions.
clvDHCPRelayObjectGroup	1.3.6.1.4.1.5089.2.3.1.12			Clavister DHCP relay statistics group
G32 clvDHCPRelayRejected	1.3.6.1.4.1.5089.1.2.11.3	Gauge32	read-only	Total DHCP relay packets rejected.
G32 clvDHCPRelayRuleCurClients	1.3.6.1.4.1.5089.1.2.11.4.1.4	Gauge32	read-only	Number of ctive relayed clients by the DHCP relay rule with corresponding index.
clvDHCPRelayRuleEntry	1.3.6.1.4.1.5089.1.2.11.4.1		not-accessible	Entry of the table of DHCP relay rules
G32 clvDHCPRelayRuleHits	1.3.6.1.4.1.5089.1.2.11.4.1.3	Gauge32	read-only	Number of the times the DHCP relay rule with corresponding index was used.
I32 clvDHCPRelayRuleIndex	1.3.6.1.4.1.5089.1.2.11.4.1.1	Integer32	not-accessible	Index of the table of DHCP relay rules.
STR clvDHCPRelayRuleName	1.3.6.1.4.1.5089.1.2.11.4.1.2	DisplayString	read-only	Display name of a DHCP relay rule
G32 clvDHCPRelayRuleRejCliPkts	1.3.6.1.4.1.5089.1.2.11.4.1.5	Gauge32	read-only	Number of client packets rejected by a rule.
G32 clvDHCPRelayRuleRejSrvPkts	1.3.6.1.4.1.5089.1.2.11.4.1.6	Gauge32	read-only	Number of DHCP server packets rejected by the DHCP relay rule with the corresponding index.
clvDHCPRelayRuleTable	1.3.6.1.4.1.5089.1.2.11.4		not-accessible	Table of DHCP relay rules.
clvDHCPRuleEntry	1.3.6.1.4.1.5089.1.2.5.2.1		not-accessible	The attributes of a DHCP server rule statistics.
I32 clvDHCPRuleIndex	1.3.6.1.4.1.5089.1.2.5.2.1.1	Integer32	not-accessible	The DHCP server rule index
STR clvDHCPRuleName	1.3.6.1.4.1.5089.1.2.5.2.1.2	DisplayString	read-only	The DHCP server rule name.
clvDHCPRuleTable	1.3.6.1.4.1.5089.1.2.5.2		not-accessible	A list of all DHCP server rules usage statistics.
G32 clvDHCPRuleUsage	1.3.6.1.4.1.5089.1.2.5.2.1.3	Gauge32	read-only	Number of used IPs in the pool.
G32 clvDHCPRuleUsagePercent	1.3.6.1.4.1.5089.1.2.5.2.1.4	Gauge32	read-only	The percentage of the used IPs in relation to the IP pool size.
clvDHCPServer	1.3.6.1.4.1.5089.1.2.5
clvDHCPServerGroup	1.3.6.1.4.1.5089.2.3.1.5			DHCP server rules objects.
G32 clvDHCPTotalLeases	1.3.6.1.4.1.5089.1.2.5.2.1.8	Gauge32	read-only	Total number of leases in the pool.
G32 clvDHCPTotalRejected	1.3.6.1.4.1.5089.1.2.5.1	Gauge32	read-only	Total number of rejected packets (all rules).
clvHA	1.3.6.1.4.1.5089.1.2.12
clvHAGroup	1.3.6.1.4.1.5089.2.3.1.14			Clavister HA statistics group
G32 clvHASyncSendQueueLength	1.3.6.1.4.1.5089.1.2.12.1	Gauge32	read-only	Size of the queue used for the High Availability sync interface.
G32 clvHASyncSendQueueUsageOctects	1.3.6.1.4.1.5089.1.2.12.3	Gauge32	read-only	High Availability Sync interface queue usage in number of octects.
G32 clvHASyncSendQueueUsagePackets	1.3.6.1.4.1.5089.1.2.12.2	Gauge32	read-only	High Availability Sync interface queue usage in number of packets.
C32 clvHASyncSendResentPackets	1.3.6.1.4.1.5089.1.2.12.5	Counter32	read-only	Number of High Availability packets resent on Sync.
C32 clvHASyncSentPackets	1.3.6.1.4.1.5089.1.2.12.4	Counter32	read-only	Number High Availability packets sent on Sync.
clvHttpAlg	1.3.6.1.4.1.5089.1.2.9.4
G32 clvHttpAlgCntFltAllowed	1.3.6.1.4.1.5089.1.2.9.4.2.1.4	Gauge32	read-only	Total number of URLs intercepted and allowed by a content filtering object.
G32 clvHttpAlgCntFltBlocked	1.3.6.1.4.1.5089.1.2.9.4.2.1.5	Gauge32	read-only	Total number of URLs intercepted and blocked by a content filtering object.
clvHttpAlgCntFltEntry	1.3.6.1.4.1.5089.1.2.9.4.2.1		not-accessible	Entry of the table of HTTP ALG content filtering rules.
I32 clvHttpAlgCntFltIndex	1.3.6.1.4.1.5089.1.2.9.4.2.1.1	Integer32	not-accessible	The index of an entry of the Table of HTTP ALG content filtering objects.
STR clvHttpAlgCntFltName	1.3.6.1.4.1.5089.1.2.9.4.2.1.2	DisplayString	read-only	The name of the a HTTP ALG content fitering.
G32 clvHttpAlgCntFltRequests	1.3.6.1.4.1.5089.1.2.9.4.2.1.3	Gauge32	read-only	Total number of URLs intercepted by a content filtering object.
clvHttpAlgCntFltTable	1.3.6.1.4.1.5089.1.2.9.4.2		not-accessible	Table of HTTP ALG content filtering rules.
clvHttpAlgEntry	1.3.6.1.4.1.5089.1.2.9.4.1.1		not-accessible	A row of the table of HTTP ALG objects.
I32 clvHttpAlgIndex	1.3.6.1.4.1.5089.1.2.9.4.1.1.1	Integer32	not-accessible	The index of an entry of the Table of HTTP ALG objects.
STR clvHttpAlgName	1.3.6.1.4.1.5089.1.2.9.4.1.1.2	DisplayString	read-only	The name of an HTTP ALG object.
clvHttpAlgTable	1.3.6.1.4.1.5089.1.2.9.4.1		not-accessible	Table of HTTP ALG objects.
G32 clvHttpAlgTotalAllowed	1.3.6.1.4.1.5089.1.2.9.4.1.1.4	Gauge32	read-only	Total number of allowed URL requests.
G32 clvHttpAlgTotalBlocked	1.3.6.1.4.1.5089.1.2.9.4.1.1.5	Gauge32	read-only	Total number of blocked URL requests.
G32 clvHttpAlgTotalRequested	1.3.6.1.4.1.5089.1.2.9.4.1.1.3	Gauge32	read-only	Total number of URL requests.
clvHWSensorEntry	1.3.6.1.4.1.5089.1.2.1.11.1		not-accessible	Entry of table of hardware sensors.
I32 clvHWSensorIndex	1.3.6.1.4.1.5089.1.2.1.11.1.1	Integer32	not-accessible	Index of the entries of the sensor table.
STR clvHWSensorName	1.3.6.1.4.1.5089.1.2.1.11.1.2	DisplayString	read-only	The description of the sensor.
clvHWSensorTable	1.3.6.1.4.1.5089.1.2.1.11		not-accessible	Table of hardware sensors.
STR clvHWSensorUnit	1.3.6.1.4.1.5089.1.2.1.11.1.4	DisplayString	read-only	The description of the unit of the value mesured by sensor.
G32 clvHWSensorValue	1.3.6.1.4.1.5089.1.2.1.11.1.3	Gauge32	read-only	The value of the sensor.
C32 clvIfBitsInCnt	1.3.6.1.4.1.5089.1.2.1.7.1.8	Counter32	read-only	Number of bits received by the interface
C32 clvIfBitsOutCnt	1.3.6.1.4.1.5089.1.2.1.7.1.9	Counter32	read-only	Number of bits sent by the interface
C32 clvIfBitsTotCnt	1.3.6.1.4.1.5089.1.2.1.7.1.11	Counter32	read-only	Totat number of bits transmited by the interface
C32 clvIfFragReassFail	1.3.6.1.4.1.5089.1.2.1.7.1.5	Counter32	read-only	Number of packets that could not be reassembled, either due to resource starvation, illegal fragmentation, or just packet loss.
C32 clvIfFragReassOk	1.3.6.1.4.1.5089.1.2.1.7.1.4	Counter32	read-only	Number of complete IP packets successfully reassembled from the fragments received in the interface.
C32 clvIfFragsIn	1.3.6.1.4.1.5089.1.2.1.7.1.3	Counter32	read-only	Number of IP packet fragments received in the interface.
STR clvIfName	1.3.6.1.4.1.5089.1.2.1.7.1.2	DisplayString	read-only	The name of the interface.
C32 clvIfPktsInCnt	1.3.6.1.4.1.5089.1.2.1.7.1.6	Counter32	read-only	Number of packets received by the interface.
C32 clvIfPktsOutCnt	1.3.6.1.4.1.5089.1.2.1.7.1.7	Counter32	read-only	Number of packets sent by the interface
C32 clvIfPktsTotCnt	1.3.6.1.4.1.5089.1.2.1.7.1.10	Counter32	read-only	Totat number of packets transmited by the interface
G32 clvIfRxAvgUse	1.3.6.1.4.1.5089.1.2.1.8.1.4	Gauge32	read-only	Rx Ring average usage.
G32 clvIfRxDespools	1.3.6.1.4.1.5089.1.2.1.8.1.3	Gauge32	read-only	Number of despool events per second.
clvIfRxRingEntry	1.3.6.1.4.1.5089.1.2.1.8.1		not-accessible	The row in a table of Clavister specific interface Rx ring statistics.
C32 clvIfRxRingFifoErrors	1.3.6.1.4.1.5089.1.2.1.8.1.2	Counter32	read-only	Rx Ring number of FIFO errors.
I32 clvIfRxRingIndex	1.3.6.1.4.1.5089.1.2.1.8.1.1	Integer32	not-accessible	Index of a row in clvIfRxRingTable.
G32 clvIfRxRingSaturation	1.3.6.1.4.1.5089.1.2.1.8.1.5	Gauge32	read-only	Rx Ring sturation. Percentage of ring use per despool event when the ring has been more than half full.
clvIfRxRingTable	1.3.6.1.4.1.5089.1.2.1.8		not-accessible	A table of Clavister specific interface Rx ring statistics
clvIfStatsEntry	1.3.6.1.4.1.5089.1.2.1.7.1		not-accessible	The row in a table of Clavister specific interface statistics
clvIfStatsGroup	1.3.6.1.4.1.5089.2.3.1.8			Clavister interface statistics group.
I32 clvIfStatsIndex	1.3.6.1.4.1.5089.1.2.1.7.1.1	Integer32	not-accessible	Index of a row in clvSysIfStatsTable
clvIfStatsTable	1.3.6.1.4.1.5089.1.2.1.7		not-accessible	A table of Clavister specific interfaces statistics
G32 clvIfTxAvgUse	1.3.6.1.4.1.5089.1.2.1.9.1.3	Gauge32	read-only	Tx Ring number of despool events when the ring has been completely flooded
G32 clvIfTxDespools	1.3.6.1.4.1.5089.1.2.1.9.1.2	Gauge32	read-only	Tx Ring number of despool event per second (polls when there is at least one buffer in the ring)
clvIfTxRingEntry	1.3.6.1.4.1.5089.1.2.1.9.1		not-accessible	The row in a table of Clavister specific interface Tx ring statistics.
I32 clvIfTxRingIndex	1.3.6.1.4.1.5089.1.2.1.9.1.1	Integer32	not-accessible	Index of a row in clvIfRxRingTable.
G32 clvIfTxRingSaturation	1.3.6.1.4.1.5089.1.2.1.9.1.4	Gauge32	read-only	Tx Ring percentage of use per despool event when the ring has been more than half full.
clvIfTxRingTable	1.3.6.1.4.1.5089.1.2.1.9		not-accessible	A table of Clavister specific interface Tx ring statistics
clvIfVlanGroup	1.3.6.1.4.1.5089.2.3.1.15			Clavister VLAN statistics group
I32 clvIfVlanIndex	1.3.6.1.4.1.5089.1.2.1.10.1.1	Integer32	not-accessible	Extended index of a row in clvIfVlanStatsTable.
clvIfVlanStatsEntry	1.3.6.1.4.1.5089.1.2.1.10.1		not-accessible	The row in a table of clvIfVlanStatsTable. Each has an index equal to the ifIndex of the corresponding physical interface
clvIfVlanStatsTable	1.3.6.1.4.1.5089.1.2.1.10		not-accessible	A table of Clavister VLAN statistics
C32 clvIfVlanUntaggedInOctets	1.3.6.1.4.1.5089.1.2.1.10.1.5	Counter32	read-only	Total number of octects in untagged packets received by the interface.
C32 clvIfVlanUntaggedInPkts	1.3.6.1.4.1.5089.1.2.1.10.1.2	Counter32	read-only	Number of untaged packets untagged packets received by the interface.
C32 clvIfVlanUntaggedOutOctets	1.3.6.1.4.1.5089.1.2.1.10.1.6	Counter32	read-only	Total number of octects in untagged packets sent by the interface.
C32 clvIfVlanUntaggedOutPkts	1.3.6.1.4.1.5089.1.2.1.10.1.3	Counter32	read-only	Number of untagged packets sent by the interface.
C32 clvIfVlanUntaggedTotOctets	1.3.6.1.4.1.5089.1.2.1.10.1.7	Counter32	read-only	Total number of octects in untagged packets processed by the interface.
C32 clvIfVlanUntaggedTotPkts	1.3.6.1.4.1.5089.1.2.1.10.1.4	Counter32	read-only	Total number of untagged packets processed by the interface.
G32 clvIPPoolClientFails	1.3.6.1.4.1.5089.1.2.4.2.1.6	Gauge32	read-only	Number of failed IP pool transactions.
clvIPPoolEntry	1.3.6.1.4.1.5089.1.2.4.2.1		not-accessible	The attributes of an ip pool
G32 clvIPPoolFree	1.3.6.1.4.1.5089.1.2.4.2.1.4	Gauge32	read-only	Number of available IPs in the pool.
clvIPPoolGroup	1.3.6.1.4.1.5089.2.3.1.4			IP pool entry objects group
I32 clvIPPoolIndex	1.3.6.1.4.1.5089.1.2.4.2.1.1	Integer32	not-accessible	The ip pool index
G32 clvIPPoolMisses	1.3.6.1.4.1.5089.1.2.4.2.1.5	Gauge32	read-only	Mumber of missed IP pool negotiations for other reasons than lack of available IP numbers.
STR clvIPPoolName	1.3.6.1.4.1.5089.1.2.4.2.1.2	DisplayString	read-only	The ip pool name
G32 clvIPPoolPrepare	1.3.6.1.4.1.5089.1.2.4.2.1.3	Gauge32	read-only	Number of IP pool objects in prepare mode.
clvIPPools	1.3.6.1.4.1.5089.1.2.4
I32 clvIPPoolsNumber	1.3.6.1.4.1.5089.1.2.4.1	Integer32	read-only	The number of ip pools
clvIPPoolTable	1.3.6.1.4.1.5089.1.2.4.2		not-accessible	A list of IP pools
G32 clvIPPoolUsed	1.3.6.1.4.1.5089.1.2.4.2.1.7	Gauge32	read-only	Number of IP numbers in use from the pool.
clvIPsec	1.3.6.1.4.1.5089.1.2.2.1
G32 clvIPsecActiveTransforms	1.3.6.1.4.1.5089.1.2.2.1.1.20	Gauge32	read-only	Number of currently active transforms.
C64 clvIPsecForwardedOctetsComp	1.3.6.1.4.1.5089.1.2.2.1.1.15	Counter64	read-only	Total octets forwarded after compression.
C64 clvIPsecForwardedOctetsUcomp	1.3.6.1.4.1.5089.1.2.2.1.1.16	Counter64	read-only	Total octets forwarded before compression.
C64 clvIPsecForwardedPackets	1.3.6.1.4.1.5089.1.2.2.1.1.19	Counter64	read-only	Total packets forwarded.
clvIPsecGlobal	1.3.6.1.4.1.5089.1.2.2.1.1
C32 clvIPsecInfoDone	1.3.6.1.4.1.5089.1.2.2.1.1.9	Counter32	read-only	Number of informational exchanges done. (Not available in IKEv1 implementations)
C32 clvIPsecInfoFailed	1.3.6.1.4.1.5089.1.2.2.1.1.10	Counter32	read-only	Number of informational exchanges failed. (Not available in IKEv1 implementations)
C64 clvIPsecInOctetsComp	1.3.6.1.4.1.5089.1.2.2.1.1.11	Counter64	read-only	Total octets in before decompression.
C64 clvIPsecInOctetsUncomp	1.3.6.1.4.1.5089.1.2.2.1.1.12	Counter64	read-only	Total octets in after decompression.
C64 clvIPsecInPackets	1.3.6.1.4.1.5089.1.2.2.1.1.17	Counter64	read-only	Total packets in.
clvIPsecObjectGroup	1.3.6.1.4.1.5089.2.3.1.2			IPsec Group
C64 clvIPsecOutOctetsComp	1.3.6.1.4.1.5089.1.2.2.1.1.13	Counter64	read-only	Total octets out after compression.
C64 clvIPsecOutOctetsUncomp	1.3.6.1.4.1.5089.1.2.2.1.1.14	Counter64	read-only	Total octets out before compression.
C32 clvIPsecOutOfTransforms	1.3.6.1.4.1.5089.1.2.2.1.1.22	Counter32	read-only	Number of packets dropped due to no available transform object. (Not available in IKEv1 implementations)
C64 clvIPsecOutPackets	1.3.6.1.4.1.5089.1.2.2.1.1.18	Counter64	read-only	Total packets Out.
G32 clvIPsecPhaseOneActive	1.3.6.1.4.1.5089.1.2.2.1.1.1	Gauge32	read-only	Number of Phase-1 active negotiations
G32 clvIPsecPhaseOneAggrModeDone	1.3.6.1.4.1.5089.1.2.2.1.1.2	Gauge32	read-only	Number of Phase-1 aggressive mode negotiations.
C32 clvIPsecPhaseOneDone	1.3.6.1.4.1.5089.1.2.2.1.1.4	Counter32	read-only	Number of Phase-1 negotiations done.
C32 clvIPsecPhaseOneFailed	1.3.6.1.4.1.5089.1.2.2.1.1.5	Counter32	read-only	Number of Phase-1 negotiations failed.
C32 clvIPsecPhaseOneRekeyed	1.3.6.1.4.1.5089.1.2.2.1.1.6	Counter32	read-only	Number of Phase-1 negotiations rekeyed.
G32 clvIPsecQuickModeActive	1.3.6.1.4.1.5089.1.2.2.1.1.3	Gauge32	read-only	Number of quick mode active negotiations.
C32 clvIPsecQuickModeDone	1.3.6.1.4.1.5089.1.2.2.1.1.7	Counter32	read-only	Number of quick mode negotiations done.
C32 clvIPsecQuickModeFailed	1.3.6.1.4.1.5089.1.2.2.1.1.8	Counter32	read-only	Number of quick mode negotiations failed.
C32 clvIPsecTotalRekeys	1.3.6.1.4.1.5089.1.2.2.1.1.23	Counter32	read-only	Total number of rekeys performed.
C32 clvIPsecTotalTransforms	1.3.6.1.4.1.5089.1.2.2.1.1.21	Counter32	read-only	Total number of transform records created.
I32 clvLinkMonGrp	1.3.6.1.4.1.5089.1.2.7.1	Integer32	read-only	The number of groups of monitored links
clvLinkMonGrpEntry	1.3.6.1.4.1.5089.1.2.7.2.1		not-accessible	The attributes of a link monitor group
G32 clvLinkMonGrpHostsUp	1.3.6.1.4.1.5089.1.2.7.2.1.3	Gauge32	read-only	A Group of monitored hosts.
I32 clvLinkMonGrpIndex	1.3.6.1.4.1.5089.1.2.7.2.1.1	Integer32	not-accessible	The index row in the table of link monitor groups.
STR clvLinkMonGrpName	1.3.6.1.4.1.5089.1.2.7.2.1.2	DisplayString	read-only	The link monitor group name.
clvLinkMonGrpTable	1.3.6.1.4.1.5089.1.2.7.2		not-accessible	Table of link monitor groups.
clvLinkMonHostEntry	1.3.6.1.4.1.5089.1.2.7.3.1		not-accessible	The attributes of a monitored host.
STR clvLinkMonHostId	1.3.6.1.4.1.5089.1.2.7.3.1.2	DisplayString	read-only	The monitored host identifier.
I32 clvLinkMonHostIndex	1.3.6.1.4.1.5089.1.2.7.3.1.1	Integer32	not-accessible	The index an host in the table of link monitor hosts.
C32 clvLinkMonHostPacketsLost	1.3.6.1.4.1.5089.1.2.7.3.1.4	Counter32	read-only	Total number of lost monitoring packets.
G32 clvLinkMonHostShortTermLoss	1.3.6.1.4.1.5089.1.2.7.3.1.3	Gauge32	read-only	The percentage of short term losst packets.
clvLinkMonHostTable	1.3.6.1.4.1.5089.1.2.7.3		not-accessible	Table of link monitored hosts in a link monnitor group.
clvLinkMonitor	1.3.6.1.4.1.5089.1.2.7
clvLinkMonitorGroup	1.3.6.1.4.1.5089.2.3.1.9			Clavister link monitor statistics group
G32 clvPipeCurrentBps	1.3.6.1.4.1.5089.1.2.8.2.1.8	Gauge32	read-only	The current throughput of a pipe, in bits per second, as a sum of the corresponding values for all precedences.
G32 clvPipeCurrentPps	1.3.6.1.4.1.5089.1.2.8.2.1.9	Gauge32	read-only	The current throughput of a pipe, in packets per second, as a sum of the corresponding values for all precedences.
I32 clvPipeDefPrec	1.3.6.1.4.1.5089.1.2.8.2.1.5	Integer32	read-only	The precedence assigned to a packet for which has not one allready done by a Pipe Rule.
C32 clvPipeDelayedPackets	1.3.6.1.4.1.5089.1.2.8.2.1.10	Counter32	read-only	The number of times packets have been delayed as a result of a pipe, or pipe user having used up its allotted bandwidth. Note that one single packet may be delayed several times; if a pipe is really full, this count may exceed the number of packets actually passing through the pipe.
C32 clvPipeDropedPackets	1.3.6.1.4.1.5089.1.2.8.2.1.11	Counter32	read-only	The number of packets dropped by a pipe. Packets are dropped when CorePlus is running out of packet buffers. This occurs when excessive amounts of packets need to be queued for later delivery. The packet dropped is always the one that has been queued the longest time globally, which means that the connection suffering from packet loss will be the one most overloading the system.
clvPipeEntry	1.3.6.1.4.1.5089.1.2.8.2.1		not-accessible	A entry of the pipes table
I32 clvPipeIndex	1.3.6.1.4.1.5089.1.2.8.2.1.1	Integer32	not-accessible	The pipe index
I32 clvPipeMaxPrec	1.3.6.1.4.1.5089.1.2.8.2.1.4	Integer32	read-only	The maximum of the range of pipe precedences.
I32 clvPipeMinPrec	1.3.6.1.4.1.5089.1.2.8.2.1.3	Integer32	read-only	The minimum of the range of pipe precedences.
STR clvPipeName	1.3.6.1.4.1.5089.1.2.8.2.1.2	DisplayString	read-only	The name of the pipe
I32 clvPipeNumPrec	1.3.6.1.4.1.5089.1.2.8.2.1.6	Integer32	read-only	The number of pipe precedences
G32 clvPipeNumUsers	1.3.6.1.4.1.5089.1.2.8.2.1.7	Gauge32	read-only	The current number of users, as defined by the grouping settings of each pipe, being tracked in the pipes system. This value corresponds to the number of users active in each time slice and not to the number of users having open connections.
I32 clvPipePrec	1.3.6.1.4.1.5089.1.2.8.3.1.2	Integer32	read-only	The precedence value
G32 clvPipePrecBps	1.3.6.1.4.1.5089.1.2.8.3.1.3	Gauge32	read-only	The current throughput of the pipe, in bits per second, with the corresponding precedence.
C32 clvPipePrecDelayedPackets	1.3.6.1.4.1.5089.1.2.8.3.1.8	Counter32	read-only	The number of times packets have been delayed as a result of a precedence, or pipe user having used up its allotted bandwidth. Note that one single packet may be delayed several times; if a pipe is really full, this count may exceed the number of packets of this precedence actually passing through the pipe.
C32 clvPipePrecDropedPackets	1.3.6.1.4.1.5089.1.2.8.3.1.9	Counter32	read-only	The number of pipe dropped packets with the corresponding precedence.
G32 clvPipePrecDynLimBps	1.3.6.1.4.1.5089.1.2.8.3.1.6	Gauge32	read-only	The current bandwidth limit limit applied the precedence.
G32 clvPipePrecDynUsrLimBps	1.3.6.1.4.1.5089.1.2.8.3.1.7	Gauge32	read-only	The current precedence bandwidth limit per user of the pipe.
clvPipePrecEntry	1.3.6.1.4.1.5089.1.2.8.3.1		not-accessible	An entry of the table of pipe pecedences. These table entries are chracterized by been indexed by two values. The first index the same as the pipe index of the corresponding row in table of pipes and the second index is the index of the set of precedences of the corresponding pipe.
I32 clvPipePrecIndex	1.3.6.1.4.1.5089.1.2.8.3.1.1	Integer32	not-accessible	Index of a precedence of a specific pipe. This is the second index of the entries of pipe precedence table described by object clvPipePrecEntry.
G32 clvPipePrecReservedBps	1.3.6.1.4.1.5089.1.2.8.3.1.5	Gauge32	read-only	The current bandwidth allocated to the precedence.
clvPipePrecTable	1.3.6.1.4.1.5089.1.2.8.3		not-accessible	There is a one to many relation between a pipe and its precedences. The number of precedences is a instance attribute of each pipe. This table extends the pipes table in order to express the relation between a pipe and the respective precedences.
G32 clvPipePrecTotalPps	1.3.6.1.4.1.5089.1.2.8.3.1.4	Gauge32	read-only	The current throughput of the pipe precedence, in packets per second.
clvPipes	1.3.6.1.4.1.5089.1.2.8
clvPipesObjectGroup	1.3.6.1.4.1.5089.2.3.1.10			Clavister pipes statistics group
clvPipeTable	1.3.6.1.4.1.5089.1.2.8.2		not-accessible	Table of pipes
G32 clvPipeUsers	1.3.6.1.4.1.5089.1.2.8.1	Gauge32	read-only	The current number of users, as defined by the grouping settings of each pipe, being tracked in the pipes system. Note that this value corresponds to the number of users active in each time slice of 1/20th of a second, and not to the number of users having open connections.
I32 clvRuleIndex	1.3.6.1.4.1.5089.1.2.3.2.1.1	Integer32	not-accessible	The rule usage index.
STR clvRuleName	1.3.6.1.4.1.5089.1.2.3.2.1.2	DisplayString	read-only	The name of the rule.
clvRules	1.3.6.1.4.1.5089.1.2.3
C32 clvRuleUse	1.3.6.1.4.1.5089.1.2.3.2.1.3	Counter32	read-only	The number of times o rule was used.
clvRuleUseEntry	1.3.6.1.4.1.5089.1.2.3.2.1		not-accessible	The statistics over a rule usage.
clvRuleUseGroup	1.3.6.1.4.1.5089.2.3.1.6			Rule use objects.
clvRuleUseTable	1.3.6.1.4.1.5089.1.2.3.2		not-accessible	A list of general rules usage statistics.
G32 clvRxRingFlooded	1.3.6.1.4.1.5089.1.2.1.8.1.6	Gauge32	read-only	Rx Ring number of despool events for which the ring has been completely flooded
G32 clvRxTingFlooded	1.3.6.1.4.1.5089.1.2.1.9.1.5	Gauge32	read-only	Tx Ring number of despool events for in which the ring has been completely flooded
clvSmtpAlg	1.3.6.1.4.1.5089.1.2.9.5
G32 clvSmtpAlgDnsBlChecked	1.3.6.1.4.1.5089.1.2.9.5.2.1.3	Gauge32	read-only	Total sessions checked againt SMTP ALG DNS black list of corresponding index
clvSmtpAlgDnsBlEntry	1.3.6.1.4.1.5089.1.2.9.5.2.1		not-accessible	A row of the table of SMTP ALG DNS black list objects.
G32 clvSmtpAlgDnsBlFailChecks	1.3.6.1.4.1.5089.1.2.9.5.2.1.5	Gauge32	read-only	Total failed checks for the SMTP ALG DNS black list of corresponding index
I32 clvSmtpAlgDnsBlIndex	1.3.6.1.4.1.5089.1.2.9.5.2.1.1	Integer32	not-accessible	The index of an entry of the SMTP ALG DNS black list objects.
G32 clvSmtpAlgDnsBlMatched	1.3.6.1.4.1.5089.1.2.9.5.2.1.4	Gauge32	read-only	Total sessions that matched SMTP ALG DNS black list of corresponding index
STR clvSmtpAlgDnsBlName	1.3.6.1.4.1.5089.1.2.9.5.2.1.2	DisplayString	read-only	The SMTP DNS black list name.
clvSmtpAlgDnsBlTable	1.3.6.1.4.1.5089.1.2.9.5.2		not-accessible	Table of SMTP ALG DNS balck list objects.
clvSmtpAlgEntry	1.3.6.1.4.1.5089.1.2.9.5.1.1		not-accessible	A row of the table of SMTP ALG objects.
clvSmtpAlgGroup	1.3.6.1.4.1.5089.2.3.1.16			Clavister SMTP ALG objects group
I32 clvSmtpAlgIndex	1.3.6.1.4.1.5089.1.2.9.5.1.1.1	Integer32	not-accessible	The index of an entry of the Table of SMTP ALG objects.
STR clvSmtpAlgName	1.3.6.1.4.1.5089.1.2.9.5.1.1.2	DisplayString	read-only	The name of an SMTP ALG object.
clvSmtpAlgTable	1.3.6.1.4.1.5089.1.2.9.5.1		not-accessible	Table of SMTP ALG objects.
G32 clvSmtpAlgTotCheckedSes	1.3.6.1.4.1.5089.1.2.9.5.1.1.3	Gauge32	read-only	Total sessions checked by the SMTP ALG of corresponding index.
G32 clvSmtpAlgTotDroppedSes	1.3.6.1.4.1.5089.1.2.9.5.1.1.5	Gauge32	read-only	Total deroped sessions for the SMTP ALG of corresponding index.
G32 clvSmtpAlgTotSpamSes	1.3.6.1.4.1.5089.1.2.9.5.1.1.4	Gauge32	read-only	Total spam sessions detected by the SMTP ALG of corresponding index.
clvStateCountersGroup	1.3.6.1.4.1.5089.2.3.1.3			Per state counters
G32 clvSysBuffUse	1.3.6.1.4.1.5089.1.2.1.4	Gauge32	read-only	The current number of buffers in use.
G32 clvSysConns	1.3.6.1.4.1.5089.1.2.1.5	Gauge32	read-only	The numer of connections.
G32 clvSysCpuLoad	1.3.6.1.4.1.5089.1.2.1.1	Gauge32	read-only	The system cpu load.
C32 clvSysForwardedBitsEx	1.3.6.1.4.1.5089.1.2.1.2	Counter32	read-only	Total number of forwarded bytes.
C32 clvSysForwardedPackets	1.3.6.1.4.1.5089.1.2.1.3	Counter32	read-only	Total number of forwarded packets.
G32 clvSysMemUsage	1.3.6.1.4.1.5089.1.2.1.12	Gauge32	read-only	The current memory usage.
clvSysPerStateCounters	1.3.6.1.4.1.5089.1.2.1.6
G32 clvSysPscIcmp	1.3.6.1.4.1.5089.1.2.1.6.5	Gauge32	read-only	Number of ICMP connections.
G32 clvSysPscOther	1.3.6.1.4.1.5089.1.2.1.6.6	Gauge32	read-only	Number of other connections.
G32 clvSysPscTcpFin	1.3.6.1.4.1.5089.1.2.1.6.3	Gauge32	read-only	Number of TCP connections in the FIN state.
G32 clvSysPscTcpOpen	1.3.6.1.4.1.5089.1.2.1.6.2	Gauge32	read-only	Number of TCP connections in the OPEN state.
G32 clvSysPscTcpSyn	1.3.6.1.4.1.5089.1.2.1.6.1	Gauge32	read-only	Number of TCP connections in the SYN state.
G32 clvSysPscUdp	1.3.6.1.4.1.5089.1.2.1.6.4	Gauge32	read-only	Number of UDP connections.
clvSysTCPGroup	1.3.6.1.4.1.5089.2.3.1.17			Clavister TCP buffer usage group
G32 clvSysTCPRecvLarge	1.3.6.1.4.1.5089.1.2.1.13.2	Gauge32	read-only	Large TCP receive windows usage.
G32 clvSysTCPRecvSmall	1.3.6.1.4.1.5089.1.2.1.13.1	Gauge32	read-only	Small TCP receive windows usage.
G32 clvSysTCPSendLarge	1.3.6.1.4.1.5089.1.2.1.13.4	Gauge32	read-only	Large TCP send windows usage.
G32 clvSysTCPSendSmall	1.3.6.1.4.1.5089.1.2.1.13.3	Gauge32	read-only	Small TCP send windows usage.
clvSysTCPUsage	1.3.6.1.4.1.5089.1.2.1.13
clvSystem	1.3.6.1.4.1.5089.1.2.1
clvSystemObjectGroup	1.3.6.1.4.1.5089.2.3.1.1			System statistics Group
G32 clvSysTimerUsage	1.3.6.1.4.1.5089.1.2.1.14	Gauge32	read-only	The current number of timers in use.
clvUserAuth	1.3.6.1.4.1.5089.1.2.6
G32 clvUserAuthEAPUsers	1.3.6.1.4.1.5089.1.2.6.5	Gauge32	read-only	Number of currently logged in EAP users.
clvUserAuthGroup	1.3.6.1.4.1.5089.2.3.1.7			User auth objects.
G32 clvUserAuthHTTPSUsers	1.3.6.1.4.1.5089.1.2.6.3	Gauge32	read-only	Number of currently logged in HTTPS users.
G32 clvUserAuthHTTPUsers	1.3.6.1.4.1.5089.1.2.6.1	Gauge32	read-only	Number of currently logged in HTTP users.
G32 clvUserAuthPPPUsers	1.3.6.1.4.1.5089.1.2.6.4	Gauge32	read-only	Number of currently logged in PPP users.
I32 clvUserAuthRuleIndex	1.3.6.1.4.1.5089.1.2.6.6.1.1	Integer32	not-accessible	The rule usage index.
STR clvUserAuthRuleName	1.3.6.1.4.1.5089.1.2.6.6.1.2	DisplayString	read-only	The name of the rule.
C32 clvUserAuthRuleUse	1.3.6.1.4.1.5089.1.2.6.6.1.3	Counter32	read-only	The number of times o rule was used.
clvUserAuthRuleUseEntry	1.3.6.1.4.1.5089.1.2.6.6.1		not-accessible	The attributes of an authentication rule usage statistics.
clvUserAuthRuleUseTable	1.3.6.1.4.1.5089.1.2.6.6		not-accessible	Table of user authentication rule usage.
G32 clvUserAuthXAUTHUsers	1.3.6.1.4.1.5089.1.2.6.2	Gauge32	read-only	Number of currently logged in XAUTH users.
clvVPN	1.3.6.1.4.1.5089.1.2.2

RFC description

Statistics and performance monitoring module for Clavister CorePlus firewall and security appliances.

Start monitoring Clavister CorePlus firewall/UTM/VPN appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CLAVISTER-MIB