All MIBs › CYBEROAM-MIB
Organization: Elitecore Technologies
Last Updated: 2006-07-14
Category: Security
Description: Monitors Elitecore Cyberoam UTM appliance security events, VPN tunnels, and interface statistics.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is CYBEROAM-MIB?
This MIB monitors Elitecore/Cyberoam (now Sophos) Unified Threat Management (UTM) firewall appliances, covering security-subsystem versions, system resource load, and appliance identity. It exposes identity/configuration data (applianceKey, applianceModel, cyberoamOpMode), security-engine software versions (webcatVersion, avVersion, asVersion, idpVersion), and performance/health counters (cpuPercentUsage, diskCapacity, diskPercentUsage, systemDate). It is explicitly built for monitoring both software and hardware status of the appliance: CPU load and disk usage reveal resource exhaustion, while sysStatus and sysInstall fields track firmware install/operational state, and the security-engine version fields let an NMS confirm antivirus/anti-spam/IDP/web-category signatures are current. As a proprietary appliance MIB it has no described dependency on other MIBs, though it typically sits alongside standard MIB-II for basic interface data. Deployment context is Cyberoam UTM/firewall appliances at network perimeters in enterprise or SMB networks, and administrators can download the CYBEROAM-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in CYBEROAM-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Cyberoam UTM firewall/security appliance
Monitoring Examples
An admin polls cpuPercentUsage and diskPercentUsage to catch resource exhaustion on the appliance, and checks avVersion, idpVersion, and asVersion against expected signature release dates to detect stale security definitions. sysStatus and sysInstall would be checked after a firmware upgrade to confirm the new image installed and is running correctly.
What Can Be Monitored
- CPU utilization
- disk capacity and usage
- antivirus/anti-spam/IDP/web-category signature versions
- firmware/system version
- system installation/operational status
- appliance operating mode
Imported Objects
From SNMPv2-SMI
| Counter32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-IDENTITY | |
| OBJECT-TYPE | |
| enterprises | |
| snmpModules |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
Configures Cyberoam firewall agent SNMP parameters, operation modes, and HA settings.
Start monitoring Cyberoam (Sophos) UTM firewall/security appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.