All MIBs › ENTERASYS-FIREWALL-MIB
Organization: Enterasys Networks, Inc
Last Updated: 2004-11-17
Category: Domain: Security, VPN and Security, Vendor: Enterasys/Cabletron
Description: Enterasys Networks MIB for configuring and monitoring firewall policies, rules, and connection tracking on Enterasys devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is ENTERASYS-FIREWALL-MIB?
ENTERASYS-FIREWALL-MIB is a private Enterasys Networks MIB for configuring and monitoring firewall policies, connection timeouts, and interface-level firewall enablement on Enterasys network devices with integrated firewall functionality. It exposes global firewall configuration (protocol timeouts, authentication port/timeout, logging threshold) along with a per-interface table tracking where the firewall is enabled and when that changed. Its monitoring relevance covers both configuration status (is the firewall enabled, are timeouts set as expected) and operational/security status (recent changes to firewall-enabled interfaces), which matters for confirming a device's security posture and catching unexpected firewall disablement. It functions as a self-contained private security extension without explicit dependency on other standard MIBs. It is deployed on Enterasys devices that combine switching/routing with integrated firewall capability, typically at network edges requiring policy enforcement, usually starting with an ENTERASYS-FIREWALL-MIB download into the administrator's SNMP management platform.
IPNetwork Monitor allows you to monitor SNMP objects defined in ENTERASYS-FIREWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Enterasys Networks device with integrated firewall (switch/router with security module)
Monitoring Examples
An administrator would poll etsysFWFirewallEnabled to confirm the firewall feature is globally active, and check etsysFWTcpTimeout, etsysFWUdpTimeout, and etsysFWIcmpTimeout to verify connection-tracking timeout values match security policy. The etsysFWFirewallOnIntfTable, tracked via etsysFWFirewallOnIntfLastChange, lets an operator see per-interface firewall enablement and detect if a specific interface's firewall protection was unexpectedly disabled, while etsysFWLoggingThreshold indicates the configured sensitivity for firewall event logging.
What Can Be Monitored
- global firewall enabled state
- TCP/UDP/ICMP connection timeout settings
- per-interface firewall enablement and last-change time
- firewall logging threshold
- authentication port/timeout settings
This MIB depends on
Related MIBs
Imported Objects
From ENTERASYS-MIB-NAMES
| etsysModules | OBJECT-IDENTITY |
From IF-MIB
| ifIndex | OBJECT-TYPE |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType | |
| InetPortNumber |
From SNMP-FRAMEWORK-MIB
| SnmpAdminString |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DateAndTime | |
| RowStatus | |
| StorageType | |
| TimeStamp | |
| TruthValue | |
| VariablePointer |
How to Use in IPNetwork Monitor
Example using etsysFWPolicyRuleTrueEvents OID:
Select an Enterasys Networks switch (legacy, later Extreme Networks) with integrated firewall as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type etsysFWPolicyRuleTrueEvents into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of times since the device has restarted that the rule has been true during packet inspection. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| etsysFirewallMIB | 1.3.6.1.4.1.5624.1.2.37 | This MIB module defines a portion of the SNMP MIB under the Enterasys Networks enterprise OID pertaining to the configuration, policy, and monitoring of firewall network devices. | ||
| etsysFWConfigurationObjects | 1.3.6.1.4.1.5624.1.2.37.1 | |||
| T/F etsysFWFirewallEnabled | 1.3.6.1.4.1.5624.1.2.37.1.1 | TruthValue | read-write | The current state of the firewall is returned when this value is read. Setting the value to true causes the firewall to start inspecting packets. Setting the value to false causes the firewall to stop inspecting packets. The value read could be different than the last value set if the state is changed by a means other than this MIB. |
| U32 etsysFWTcpTimeout | 1.3.6.1.4.1.5624.1.2.37.1.2 | Unsigned32 | read-write | Firewalls can perform stateful inspection of TCP sessions. TCP sessions are created and deleted by monitoring TCP SYNC/ACK/FIN flags. Inactivity for the period specified by this object will delete the TCP session. |
| U32 etsysFWUdpTimeout | 1.3.6.1.4.1.5624.1.2.37.1.3 | Unsigned32 | read-write | Firewalls can perform stateful inspection of UDP sessions. UDP sessions are created on the first outbound UDP packet. Inactivity for the period specified by this object will delete the UDP session. |
| U32 etsysFWIcmpTimeout | 1.3.6.1.4.1.5624.1.2.37.1.4 | Unsigned32 | read-write | ICMP sessions are created on an outbound ICMP echo request. Inactivity for the period specified by this object will delete the ICMP session. |
| U32 etsysFWAuthTimeout | 1.3.6.1.4.1.5624.1.2.37.1.5 | Unsigned32 | read-write | Firewalls can be configured to only allow packets from IP addresses that have been authenticated. An authenticated IP address will need to re-authenticate if there is no traffic from that address for the period specified by this object. |
| I32 etsysFWAuthPort | 1.3.6.1.4.1.5624.1.2.37.1.6 | Integer32 | read-write | Firewalls can be configured to only allow packets from IP addresses that have been authenticated. This object specifies the port on which the firewall listens for authentication requests. |
| I32 etsysFWLoggingThreshold | 1.3.6.1.4.1.5624.1.2.37.1.7 | Integer32 | read-write | The threshold for firewall event logging. Events with severity equal to or less than the value specified will be logged. The value corresponds to syslog severity levels as defined in RFC3164. |
| U32 etsysFWRPCMicrosoftTimeout | 1.3.6.1.4.1.5624.1.2.37.1.8 | Unsigned32 | read-write | The idle session timeout on packet inspection for Remote Procedure Call (RPC) -based applications. This Application Level Gateway (ALG) supports two types of RPCs - SUN (used by most UNIX systems) and Microsoft. If the RPC-based session is idle for the specified period, it will be shutdown. |
| U32 etsysFWRPCSunTimeout | 1.3.6.1.4.1.5624.1.2.37.1.9 | Unsigned32 | read-write | The idle session timeout on packet inspection for Remote Procedure Call (RPC) -based applications. This Application Level Gateway (ALG) supports two types of RPCs - SUN (used by most UNIX systems) and Microsoft. If the RPC-based session is idle for the specified period, it will be shutdown. |
| TIM etsysFWFirewallOnIntfLastChange | 1.3.6.1.4.1.5624.1.2.37.1.10 | TimeStamp | read-only | The sysUpTime at which the etsysFWFirewallOnIntfTable was last modified. |
| etsysFWFirewallOnIntfTable | 1.3.6.1.4.1.5624.1.2.37.1.11 | not-accessible | This table defines the state of the firewall on individual interfaces. The firewall may be enabled or disabled for each interface on the device. The effective state of the firewall depends on the setting of etsysFWFirewallEnabled. | | interface etsysFWFirewallEnabled | etsysFWFirewallOnIntfEnabled | effective | | state ----------------------------------------------------------------- true true enabled true false disabled false true disabled false false disabled If an interface is not represented in this table, then its effective state is determined by etsysFWFirewallEnabled. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWFirewallOnIntfStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWFirewallOnIntfStorageType value could allow the row to be modified or deleted. | |
| etsysFWFirewallOnIntfEntry | 1.3.6.1.4.1.5624.1.2.37.1.11.1 | not-accessible | A row defining whether firewall is enabled for a particular interface. | |
| T/F etsysFWFirewallOnIntfEnabled | 1.3.6.1.4.1.5624.1.2.37.1.11.1.1 | TruthValue | read-create | The current state of the firewall is returned when this value is read. This setting is only effective when etsysFWFirewallEnabled is true. Setting the value to true causes the firewall to start inspecting packets, if etsysFWFirewallEnabled is true. Setting the value to false causes the firewall to stop inspecting packets, if etsysFWFirewallEnabled is true. |
| STO etsysFWFirewallOnIntfStorageType | 1.3.6.1.4.1.5624.1.2.37.1.11.1.2 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWFirewallOnIntfRowStatus | 1.3.6.1.4.1.5624.1.2.37.1.11.1.3 | RowStatus | read-create | The status of this conceptual row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| TIM etsysFWFirewallIntfFilterLastChange | 1.3.6.1.4.1.5624.1.2.37.1.12 | TimeStamp | read-only | The sysUpTime at which the etsysFWFirewallIntfFilterTable was last modified. |
| etsysFWFirewallIntfFilterTable | 1.3.6.1.4.1.5624.1.2.37.1.13 | not-accessible | This table defines the IP filters applied to individual interfaces. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWFirewallIntfFilterStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWFirewallIntfFilterStorageType value could allow the row to be modified or deleted. | |
| etsysFWFirewallIntfFilterEntry | 1.3.6.1.4.1.5624.1.2.37.1.13.1 | not-accessible | A row defining the IP filters applied to individual interfaces. | |
| INT etsysFWFirewallIntfFilterType | 1.3.6.1.4.1.5624.1.2.37.1.13.1.1 | INTEGER | not-accessible | The type of IP filter that applies on a particular interface. ipBroadcast - This filter type allows incoming/outgoing IP packets through the firewall with 255.255.255.255 set as the destination address. It enables broadcast protocols such as DHCP to traverse the firewall. ipMulticast - This filter type allows incoming/outgoing IP packets with a multicast destination address through the firewall. It enables multicast protocols such as RIP and OSPF to traverse the firewall. ipOptionAll - All IP options allowed. ipOptionOther - Any IP option other than those explicitly supported by the command. ipOptionLooseSourceRoute - Requests routing that includes the specified routers. This routing path includes a sequence of IP addresses a datagram must follow to its destination but allows multiple network hops between successive addresses on the list. ipOptionRecordRoute - Traces a route. It allows the source to create an empty list of IP addresses and arrange for each router that router that handles a datagram to add its IP address to the list. When a datagram arrives, the destination device can extract and and process the list of addresses. ipOptionStrictSourceRoute - Specifies an exact route through the Internet. This routing path includes a sequence of IP addresses a datagram must follow, hop by hop, from its source to destination. The path between two successive addresses in the list must consist of a single physical network. ipOptionTimeStamp - Records timestamps along a route. It is similar to the record route option in that every router from source to destination adds its IP address, and a timestamp, to the list. The timestamp notes the time and date a router handled the datagram, expressed in milliseconds since midnight, Universal Time. |
| INT etsysFWFirewallIntfFilterDirection | 1.3.6.1.4.1.5624.1.2.37.1.13.1.2 | INTEGER | read-create | The direction which the filter is applied. none - Denies the packet that matched the filter type. in - Allows the packet that matched the filter type to enter the interface. out - Allows the packet that matched the filter type to exit the interface. both - Allows the packet that matched the filter type to enter and exit the interface. |
| STO etsysFWFirewallIntfFilterStorageType | 1.3.6.1.4.1.5624.1.2.37.1.13.1.3 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWFirewallIntfFilterRowStatus | 1.3.6.1.4.1.5624.1.2.37.1.13.1.4 | RowStatus | read-create | The status of this conceptual row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| etsysFWPolicyObjects | 1.3.6.1.4.1.5624.1.2.37.2 | |||
| etsysFWPolicyGroups | 1.3.6.1.4.1.5624.1.2.37.2.1 | |||
| STR etsysFWSystemPolicyGroupName | 1.3.6.1.4.1.5624.1.2.37.2.1.1 | SnmpAdminString | read-write | The name of the policy group containing the global system policy. The value of etsysFWSystemPolicyGroupName should be used as an index into the etsysFWGroupPolicyTable to determine the list of rules that MUST be applied to the system. A zero length string indicates no system wide policy exists, and the default policy of 'allow' should be executed until one is imposed by either this object or by the interface processing the packet. Since policy group names are unique, the etsysFWSystemPolicyGroupName MUST NOT be equal to any etsysFWIntfToGroupName objects. |
| TIM etsysFWIntfToGroupLastChange | 1.3.6.1.4.1.5624.1.2.37.2.1.2 | TimeStamp | read-only | The sysUpTime at which the etsysFWIntfToGroupTable was last modified. |
| etsysFWIntfToGroupTable | 1.3.6.1.4.1.5624.1.2.37.2.1.3 | not-accessible | This table defines the group of firewall rules applied to individual interfaces. Rules for this group will be applied in the etsysFWGroupPolicyTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWIntfToGroupStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWIntfToGroupStorageType value could allow the row to be modified or deleted. | |
| etsysFWIntfToGroupEntry | 1.3.6.1.4.1.5624.1.2.37.2.1.3.1 | not-accessible | A row defining the group name for a particular interface. | |
| INT etsysFWIntfToGroupIntfDirection | 1.3.6.1.4.1.5624.1.2.37.2.1.3.1.1 | INTEGER | not-accessible | Defines the direction of the packets to inspect, incoming (ingress), or outgoing (egress). |
| STR etsysFWIntfToGroupName | 1.3.6.1.4.1.5624.1.2.37.2.1.3.1.2 | SnmpAdminString | not-accessible | The group name for this interface. The value of etsysFWIntfToGroupName should be used as index into the etsysFWGroupPolicyTable to determine the list of rules that MUST be applied to this interface. Since policy group names are unique, the etsysFWIntfToGroupName MUST NOT be equal to the etsysFWSystemPolicyGroupName object. |
| STO etsysFWIntfToGroupStorageType | 1.3.6.1.4.1.5624.1.2.37.2.1.3.1.3 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWIntfToGroupRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.1.3.1.4 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| TIM etsysFWGroupPolicyLastChange | 1.3.6.1.4.1.5624.1.2.37.2.1.4 | TimeStamp | read-only | The sysUpTime at which the etsysFWGroupPolicyTable was last modified. |
| etsysFWGroupPolicyTable | 1.3.6.1.4.1.5624.1.2.37.2.1.5 | not-accessible | This table defines the firewall rules applied to groups. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWGroupPolicyStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWGroupPolicyStorageType value could allow the row to be modified or deleted. | |
| etsysFWGroupPolicyEntry | 1.3.6.1.4.1.5624.1.2.37.2.1.5.1 | not-accessible | A row defining a particular group policy rule and its priority. | |
| STR etsysFWGroupPolicyName | 1.3.6.1.4.1.5624.1.2.37.2.1.5.1.1 | SnmpAdminString | not-accessible | The name of the group. These names should be either the etsysFWSystemPolicyGroupName or the etsysFWIntfToGroupName from the etsysFWIntfToGroupTable. |
| STR etsysFWGroupPolicyRuleDef | 1.3.6.1.4.1.5624.1.2.37.2.1.5.1.2 | SnmpAdminString | not-accessible | An etsysFWPolicyRuleDefName from the etsysFWPolicyRuleDefTable. |
| I32 etsysFWGroupPolicyPriority | 1.3.6.1.4.1.5624.1.2.37.2.1.5.1.3 | Integer32 | read-create | The priority of rule in the group. The firewall applies the rules from the lowest to the highest priority. Priority can only be in the range of 0 to the maximum number of policyRuleDef in the group + 1. i.e. If there are 5 policies in the group. The maximum priority the user can create is 6. |
| STO etsysFWGroupPolicyStorageType | 1.3.6.1.4.1.5624.1.2.37.2.1.5.1.4 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWGroupPolicyRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.1.5.1.5 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| etsysFWPolicyRules | 1.3.6.1.4.1.5624.1.2.37.2.2 | |||
| I32 etsysFWPolicyRuleDefMaxEntries | 1.3.6.1.4.1.5624.1.2.37.2.2.1 | Integer32 | read-only | The maximum number of entries allowed in the etsysFWPolicyRuleDefTable. |
| G32 etsysFWPolicyRuleDefNumEntries | 1.3.6.1.4.1.5624.1.2.37.2.2.2 | Gauge32 | read-only | The current number of entries in the etsysFWPolicyRuleDefTable. |
| TIM etsysFWPolicyRuleDefLastChange | 1.3.6.1.4.1.5624.1.2.37.2.2.3 | TimeStamp | read-only | The sysUpTime at which the etsysFWPolicyRuleDefTable was last modified. |
| etsysFWPolicyRuleDefTable | 1.3.6.1.4.1.5624.1.2.37.2.2.4 | not-accessible | This table defines a policy rule by associating a network objects with a filter or a set of filters and an action to take when the filter is true. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWPolicyRuleDefStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWPolicyRuleDefStorageType value could allow the row to be modified or deleted. | |
| etsysFWPolicyRuleDefEntry | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1 | not-accessible | A row defining a particular policy definition. A rule definition binds a filter pointer to an action. | |
| STR etsysFWPolicyRuleDefName | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.1 | SnmpAdminString | not-accessible | etsysFWPolicyRuleDefName is the administratively assigned name of the policy rule. |
| NUM etsysFWPolicyRuleDefSrcNetwork | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.2 | VariablePointer | read-create | If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefDstNetwork, the firewall will evaluate the etsysFWPolicyRuleDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned. |
| NUM etsysFWPolicyRuleDefDstNetwork | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.3 | VariablePointer | read-create | If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefDstNetwork, the firewall will evaluate the etsysFWPolicyRuleDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned. |
| T/F etsysFWPolicyRuleDefBidirectional | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.4 | TruthValue | read-create | A policy may be specified as bidirectional to mean that it also operates with the etsysFWPolicyRuleDefSrcNetwork and etsysFWPolicyRuleDefDstNetwork reversed. If this column is false, the policy operates only in the direction defined by etsysFWPolicyRuleDefSrcNetwork and etsysFWPolicyRuleDefDstNetwork. |
| NUM etsysFWPolicyRuleDefService | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.5 | VariablePointer | read-create | etsysFWPolicyRuleDefFilter points to a filter which is used to evaluate whether the action associated with this row should be fired or not. The action will only fire if the filter referenced by this object evaluates to true. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other filter tables or scalars as well: etsysFWIpHeaderFilterTable etsysFWIpOptionsFilterTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned. |
| STR etsysFWPolicyRuleAuthName | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.6 | SnmpAdminString | read-create | The authentication group name to use. |
| INT etsysFWPolicyRuleDefAction | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.7 | INTEGER | read-create | The action to take when the filter is true. allow: the packet should be allowed drop: the packet should be dropped allowAuth: the packet is allowed if the source address has been authenticated to the group. |
| T/F etsysFWPolicyRuleDefLogging | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.8 | TruthValue | read-create | When the filter is true, log the activity of this rule. |
| STO etsysFWPolicyRuleDefStorageType | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.9 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWPolicyRuleDefRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.2.4.1.10 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object SHOULD NOT be set to active until the containing networks and filters have been defined. Once active, it MUST remain active until no etsysFWGroupPolicyRuleDef entries are referencing it. |
| etsysFWPolicyNetworks | 1.3.6.1.4.1.5624.1.2.37.2.3 | |||
| I32 etsysFWNetworkGroupMaxEntries | 1.3.6.1.4.1.5624.1.2.37.2.3.1 | Integer32 | read-only | The maximum number of entries allowed in the etsysFWNetworkGroupTable. |
| G32 etsysFWNetworkGroupNumEntries | 1.3.6.1.4.1.5624.1.2.37.2.3.2 | Gauge32 | read-only | The current number of entries in the etsysFWNetworkGroupTable. |
| TIM etsysFWNetworkGroupLastChange | 1.3.6.1.4.1.5624.1.2.37.2.3.3 | TimeStamp | read-only | The sysUpTime at which the etsysFWNetworkGroupTable was last modified. |
| etsysFWNetworkGroupTable | 1.3.6.1.4.1.5624.1.2.37.2.3.4 | not-accessible | A table defining a group of network objects from the etsysFWNetworkTable or a network group in etsysFWNetworkGroupTable. The networks contained in the group are defined in the etsysFWNetwkInNetGrpTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWNetworkGroupStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWNetworkGroupStorageType value could allow the row to be modified or deleted. | |
| etsysFWNetworkGroupEntry | 1.3.6.1.4.1.5624.1.2.37.2.3.4.1 | not-accessible | An entry in the etsysFWNetworkGroupTable. | |
| STR etsysFWNetworkGroupName | 1.3.6.1.4.1.5624.1.2.37.2.3.4.1.1 | SnmpAdminString | not-accessible | The administratively assigned name of the network group. |
| STO etsysFWNetworkGroupStorageType | 1.3.6.1.4.1.5624.1.2.37.2.3.4.1.2 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWNetworkGroupRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.3.4.1.3 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it MAY NOT have its value changed if any active rows in the etsysFWNetwkInNetGrpTable or the etsysFWFilterDefTable are currently pointing at this row. |
| I32 etsysFWNetworkGroupMaxNetworks | 1.3.6.1.4.1.5624.1.2.37.2.3.5 | Integer32 | read-only | The maximum number of networks allowed in a network group. |
| TIM etsysFWNetwkInNetGrpLastChange | 1.3.6.1.4.1.5624.1.2.37.2.3.6 | TimeStamp | read-only | The sysUpTime at which the etsysFWNetwkInNetGrpTable was last modified. |
| etsysFWNetwkInNetGrpTable | 1.3.6.1.4.1.5624.1.2.37.2.3.7 | not-accessible | A table defining the networks in a network group. All etsysFWNetwkInNetGrpSubNetwork objects in a etsysFWNetworkGroupName must have the same etsysFWNetworkIPVersion and etsysFWNetworkRealm. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWNetwkInNetGrpStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWNetwkInNetGrpStorageType value could allow the row to be modified or deleted. | |
| etsysFWNetwkInNetGrpEntry | 1.3.6.1.4.1.5624.1.2.37.2.3.7.1 | not-accessible | An entry in the etsysFWNetwkInNetGrpTable. | |
| STR etsysFWNetwkInNetGrpSubNetwork | 1.3.6.1.4.1.5624.1.2.37.2.3.7.1.1 | SnmpAdminString | not-accessible | The location of the contained network. The MIB defines the following tables which may be pointed to by this column: etsysFWNetworkTable Implementations should prevent recursion and return the inconsistentName exception if the SnmpAdminString value references an etsysFWNetworkGroupTable row that already contains the etsysFWNetworkGroupName of this row. If this column is set to a SnmpAdminString value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the SnmpAdminString is not supported at all, then an inconsistentValue exception should be returned. |
| STO etsysFWNetwkInNetGrpStorageType | 1.3.6.1.4.1.5624.1.2.37.2.3.7.1.2 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWNetwkInNetGrpRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.3.7.1.3 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object cannot be made active until the network or network group referenced by the etsysFWNetwkInNetGrpSubNetwork is both defined and is active. An attempt to do so will result in an inconsistentValue error. |
| I32 etsysFWNetworkMaxEntries | 1.3.6.1.4.1.5624.1.2.37.2.3.8 | Integer32 | read-only | The maximum number of entries allowed in the etsysFWNetworkTable. |
| G32 etsysFWNetworkNumEntries | 1.3.6.1.4.1.5624.1.2.37.2.3.9 | Gauge32 | read-only | The current number of entries in the etsysFWNetworkTable. |
| TIM etsysFWNetworkLastChange | 1.3.6.1.4.1.5624.1.2.37.2.3.10 | TimeStamp | read-only | The sysUpTime at which the etsysFWNetworkTable was last modified. |
| etsysFWNetworkTable | 1.3.6.1.4.1.5624.1.2.37.2.3.11 | not-accessible | A table defining the networks associated with filters to create the firewall policy rules. Networks can be defined with a network IP address and mask, an IP address range, or a single IP host address. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWNetworkStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWNetworkStorageType value could allow the row to be modified or deleted. | |
| etsysFWNetworkEntry | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1 | not-accessible | An entry in the etsysFWNetworkTable. | |
| STR etsysFWNetworkName | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.1 | SnmpAdminString | not-accessible | The administratively assigned name of the network. |
| INT etsysFWNetworkRealm | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.2 | INTEGER | read-create | A network is qualified as either an internal or external address. |
| INT etsysFWNetworkRangeOrMask | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.3 | INTEGER | read-create | When set to useIpAddrRange, the etsysFWNetworkIPAddrBegin and etsysFWNetworkIPAddrEnd define the network object in this row. When set to useIpAddrMask, the etsysFWNetworkIPAddrBegin and etsysFWNetworkIPAddrMask define the network object in this row. |
| IPt etsysFWNetworkIPVersion | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.4 | InetAddressType | read-create | The Internet Protocol version the addresses are to match against. The value of this property determines the size and format of the etsysFWNetworkIPAddressBegin, etsysFWNetworkIPAddressEnd and etsysFWNetworkIPAddressMask objects. Values of unknown, ipv4z, ipv6z and dns are not legal values for this object. |
| IP etsysFWNetworkIPAddressBegin | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.5 | InetAddress | read-create | The IP address that with either the etsysFWNetworkIPAddrEnd or etsysFWNetworkIPAddrMask define the network object for this row. |
| IP etsysFWNetworkIPAddressEnd | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.6 | InetAddress | read-create | When etsysFWNetworkRangeOrMask is set to useIpAddrRange, this is the end of the IP address range. To define a single host set this to the value of etsysFWNetworkIpAddrBegin. |
| IP etsysFWNetworkIPAddressMask | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.7 | InetAddress | read-create | When etsysFWNetworkRangeOrMask is set to useIpAddrMask, this is the mask that define the IP network. To define a single host set this to all 1's. |
| STO etsysFWNetworkStorageType | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.8 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWNetworkRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.3.11.1.9 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it MAY NOT have its value changed if any active rows in the etsysFWNetwkInNetGrpTable or the etsysFWFilterDefTable are currently pointing at this row. |
| etsysFWPolicyServices | 1.3.6.1.4.1.5624.1.2.37.2.4 | |||
| I32 etsysFWServiceGroupMaxEntries | 1.3.6.1.4.1.5624.1.2.37.2.4.1 | Integer32 | read-only | The maximum number of entries allowed in the etsysFWServiceGroupTable. |
| G32 etsysFWServiceGroupNumEntries | 1.3.6.1.4.1.5624.1.2.37.2.4.2 | Gauge32 | read-only | The current number of entries in the etsysFWServiceGroupTable. |
| TIM etsysFWServiceGroupLastChange | 1.3.6.1.4.1.5624.1.2.37.2.4.3 | TimeStamp | read-only | The sysUpTime at which the etsysFWServiceGroupTable was last modified. |
| etsysFWServiceGroupTable | 1.3.6.1.4.1.5624.1.2.37.2.4.4 | not-accessible | A table defining a group of service objects from the etsysFWServiceTable or a service group in etsysFWServiceGroupTable. The services contained in the group are defined in the etsysFWNetwkInNetGrpTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWServiceGroupStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWServiceGroupStorageType value could allow the row to be modified or deleted. | |
| etsysFWServiceGroupEntry | 1.3.6.1.4.1.5624.1.2.37.2.4.4.1 | not-accessible | An entry in the etsysFWServiceGroupTable. | |
| STR etsysFWServiceGroupName | 1.3.6.1.4.1.5624.1.2.37.2.4.4.1.1 | SnmpAdminString | not-accessible | The administratively assigned name of the service group. |
| STO etsysFWServiceGroupStorageType | 1.3.6.1.4.1.5624.1.2.37.2.4.4.1.2 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWServiceGroupRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.4.4.1.3 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it MAY NOT have its value changed if any active rows in the etsysFWNetwkInNetGrpTable or the etsysFWFilterDefTable are currently pointing at this row. |
| I32 etsysFWServiceGroupMaxServices | 1.3.6.1.4.1.5624.1.2.37.2.4.5 | Integer32 | read-only | The maximum number of services allowed in a service group. |
| TIM etsysFWServiceInSvcGrpLastChange | 1.3.6.1.4.1.5624.1.2.37.2.4.6 | TimeStamp | read-only | The sysUpTime at which the etsysFWServiceInSvcTable was last modified. |
| etsysFWServiceInSvcGrpTable | 1.3.6.1.4.1.5624.1.2.37.2.4.7 | not-accessible | A table defining the services in a service group. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWServiceInSvcGrpStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWServiceInSvcGrpStorageType value could allow the row to be modified or deleted. | |
| etsysFWServiceInSvcGrpEntry | 1.3.6.1.4.1.5624.1.2.37.2.4.7.1 | not-accessible | An entry in the etsysFWServiceInSvcGrpTable. | |
| STR etsysFWServiceInSvcGrpSubService | 1.3.6.1.4.1.5624.1.2.37.2.4.7.1.1 | SnmpAdminString | not-accessible | The location of the contained service. The MIB defines the following tables which may be pointed to by this column: etsysFWServiceTable Implementations should prevent recursion and return the inconsistentName exception if the SnmpAdminString value references an etsysFWServiceGroupTable row that already contains the etsysFWServiceGroupName of this row. If this column is set to a SnmpAdminString value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the SnmpAdminString is not supported at all, then an inconsistentValue exception should be returned. |
| STO etsysFWServiceInSvcGrpStorageType | 1.3.6.1.4.1.5624.1.2.37.2.4.7.1.2 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWServiceInSvcGrpRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.4.7.1.3 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object cannot be made active until the service or service group referenced by the etsysFWNetwkInNetGrpSubService is both defined and is active. An attempt to do so will result in an inconsistentValue error. |
| I32 etsysFWServiceMaxEntries | 1.3.6.1.4.1.5624.1.2.37.2.4.8 | Integer32 | read-only | The maximum number of entries allowed in the etsysFWServiceTable. |
| G32 etsysFWServiceNumEntries | 1.3.6.1.4.1.5624.1.2.37.2.4.9 | Gauge32 | read-only | The current number of entries in the etsysFWServiceTable. |
| TIM etsysFWServiceLastChange | 1.3.6.1.4.1.5624.1.2.37.2.4.10 | TimeStamp | read-only | The sysUpTime at which the etsysFWServiceTable was last modified. |
| etsysFWServiceTable | 1.3.6.1.4.1.5624.1.2.37.2.4.11 | not-accessible | This table contains a list of service definitions to be used within the etsysFWPolicyRuleDefTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWServiceStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWServiceStorageType value could allow the row to be modified or deleted. | |
| etsysFWServiceEntry | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1 | not-accessible | A definition of a service. | |
| STR etsysFWServiceName | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.1 | SnmpAdminString | not-accessible | The administrative name for this filter. |
| INE etsysFWServiceSrcLowPort | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.2 | InetPortNumber | read-create | The low port of the port range a packet's source must match against. To match, the port number must be greater than or equal to this value. This object is only used if sourcePort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal. |
| INE etsysFWServiceSrcHighPort | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.3 | InetPortNumber | read-create | The high port of the port range a packet's source must match against. To match, the port number must be less than or equal to this value. This object is only used if sourcePort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal. |
| INE etsysFWServiceDstLowPort | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.4 | InetPortNumber | read-create | The low port of the port range a packet's destination must match against. To match, the port number must be greater than or equal to this value. This object is only used if destinationPort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal. |
| INE etsysFWServiceDstHighPort | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.5 | InetPortNumber | read-create | The high port of the port range a packet's destination must match against. To match, the port number must be less than or equal to this value. This object is only used if destinationPort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal. |
| INT etsysFWServiceProtocol | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.6 | INTEGER | read-create | The protocol number the incoming packet must match against for this filter to be evaluated as true. This object is only used if protocol is set in etsysFWServiceType. |
| STO etsysFWServiceStorageType | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.7 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWServiceRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.4.11.1.8 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| etsysFWPolicyFilters | 1.3.6.1.4.1.5624.1.2.37.2.5 | |||
| I32 etsysFWFilterDefMaxEntries | 1.3.6.1.4.1.5624.1.2.37.2.5.1 | Integer32 | read-only | The maximum number of entries allowed in the etsysFWFilterDefTable. |
| G32 etsysFWFilterDefNumEntries | 1.3.6.1.4.1.5624.1.2.37.2.5.2 | Gauge32 | read-only | The current number of entries in the etsysFWFilterDefTable. |
| TIM etsysFWFilterDefLastChange | 1.3.6.1.4.1.5624.1.2.37.2.5.3 | TimeStamp | read-only | The sysUpTime at which the etsysFWFilterDefTable was last modified. |
| etsysFWFilterDefTable | 1.3.6.1.4.1.5624.1.2.37.2.5.4 | not-accessible | This table defines a policy rule by associating a network objects with a filter or a set of filters and an action to take when the filter is true. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWFilterDefStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWFilterDefStorageType value could allow the row to be modified or deleted. | |
| etsysFWFilterDefEntry | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1 | not-accessible | A row defining a particular filter definition. A rule definition binds a filter pointer to an action. | |
| STR etsysFWFilterDefName | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.1 | SnmpAdminString | not-accessible | etsysFWFilterDefName is the administratively assigned name of the policy rule. |
| NUM etsysFWFilterDefSrcNetwork | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.2 | VariablePointer | read-create | If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWFilterDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWFilterDefDstNetwork, the firewall will evaluate the etsysFWFilterDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to an SnmpAdminString value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned. |
| NUM etsysFWFilterDefDstNetwork | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.3 | VariablePointer | read-create | If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWFilterDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWFilterDefDstNetwork, the firewall will evaluate the etsysFWFilterDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned. |
| T/F etsysFWFilterDefBidirectional | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.4 | TruthValue | read-create | A policy may be specified as bidirectional to mean that it also operates with the etsysFWFilterDefSrcNetwork and etsysFWFilterDefDstNetwork reversed. If this column is false, the policy operates only in the direction defined by etsysFWFilterDefSrcNetwork and etsysFWFilterDefDstNetwork. |
| I32 etsysFWFilterDefProtocol | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.5 | Integer32 | read-create | x |
| I32 etsysFWFilterDefICMPType | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.6 | Integer32 | read-create | x |
| T/F etsysFWFilterDefLogging | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.7 | TruthValue | read-create | When the filter is true, log the activity of this rule. |
| STO etsysFWFilterDefStorageType | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.8 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWFilterDefRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.5.4.1.9 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object SHOULD NOT be set to active until the containing networks and filters have been defined. Once active, it MUST remain active until no etsysFWGroupFilterDef entries are referencing it. |
| I32 etsysFWCLSFilterMaxFilters | 1.3.6.1.4.1.5624.1.2.37.2.5.5 | Integer32 | read-only | The maximum number of CLS filters allowed per etsysFWPolicyRuleDefName. |
| TIM etsysFWCLSFilterLastChange | 1.3.6.1.4.1.5624.1.2.37.2.5.6 | TimeStamp | read-only | The sysUpTime at which the etsysFWCLSFilterTable was last modified. |
| etsysFWCLSFilterTable | 1.3.6.1.4.1.5624.1.2.37.2.5.7 | not-accessible | This table defines the command line string filters that can be applied to a policy rule definition. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWGroupPolicyStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWGroupPolicyStorageType value could allow the row to be modified or deleted. | |
| etsysFWCLSFilterEntry | 1.3.6.1.4.1.5624.1.2.37.2.5.7.1 | not-accessible | A row defining a particular command line string filter. | |
| I32 etsysFWCLSFilterIndex | 1.3.6.1.4.1.5624.1.2.37.2.5.7.1.1 | Integer32 | not-accessible | . |
| STR etsysFWCLSFilterWord | 1.3.6.1.4.1.5624.1.2.37.2.5.7.1.2 | SnmpAdminString | read-create | . |
| STO etsysFWCLSFilterStorageType | 1.3.6.1.4.1.5624.1.2.37.2.5.7.1.3 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWCLSFilterRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.5.7.1.4 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| etsysFWHTMLFilterTable | 1.3.6.1.4.1.5624.1.2.37.2.5.8 | not-accessible | This table contains filters that applies to the HTML protocol. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWIpOptionsHeadFiltStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWIpOptionsHeadFiltStorageType value could allow the row to be modified or deleted. | |
| etsysFWHTMLFilterEntry | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1 | not-accessible | A definition of a particular filter. | |
| STR etsysFWHTMLFilterName | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1.1 | SnmpAdminString | not-accessible | The administrative name for this HTML filter. |
| INT etsysFWHTMLFilterType | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1.2 | INTEGER | read-create | . |
| STR etsysFWHTMLFilterNetwork | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1.3 | SnmpAdminString | read-create | . |
| T/F etsysFWHTMLFilterLogging | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1.4 | TruthValue | read-create | . |
| STO etsysFWHTMLFilterStorageType | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1.5 | StorageType | read-create | The storage type for this row. |
| ROW etsysFWHTMLFilterRowStatus | 1.3.6.1.4.1.5624.1.2.37.2.5.8.1.6 | RowStatus | read-create | This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. |
| etsysFWMonitoringObjects | 1.3.6.1.4.1.5624.1.2.37.3 | |||
| G32 etsysFWPolicyRuleTrueNumEntries | 1.3.6.1.4.1.5624.1.2.37.3.1 | Gauge32 | read-only | The current number of entries in the etsysFWPolicyRuleTrueTable. |
| TIM etsysFWPolicyRuleTrueLastChange | 1.3.6.1.4.1.5624.1.2.37.3.2 | TimeStamp | read-only | The sysUpTime at which the etsysFWPolicyRuleTrueTable was last modified. |
| etsysFWPolicyRuleTrueTable | 1.3.6.1.4.1.5624.1.2.37.3.3 | not-accessible | This table contains a counter for the number of times each policy rule has been true during packet inspection since the last restart of the device. | |
| etsysFWPolicyRuleTrueEntry | 1.3.6.1.4.1.5624.1.2.37.3.3.1 | not-accessible | A row in the table for a named policy rule definition. | |
| I32 etsysFWPolicyRuleTrueIndex | 1.3.6.1.4.1.5624.1.2.37.3.3.1.1 | Integer32 | read-only | A unique index for this row. |
| STR etsysFWPolicyRuleTrueName | 1.3.6.1.4.1.5624.1.2.37.3.3.1.2 | SnmpAdminString | read-only | The name of the policy rule. |
| C32 etsysFWPolicyRuleTrueEventsEx | 1.3.6.1.4.1.5624.1.2.37.3.3.1.3 | Counter32 | read-only | The number of times since the device has restarted that the rule has been true during packet inspection. |
| DAT etsysFWPolicyRuleTrueLastEvent | 1.3.6.1.4.1.5624.1.2.37.3.3.1.4 | DateAndTime | read-only | The date and time when this rule was last true during packet inspection. |
| G32 etsysFWSessionTotalsNumEntries | 1.3.6.1.4.1.5624.1.2.37.3.4 | Gauge32 | read-only | The current number of entries in the etsysFWSessionTotalsTable. |
| TIM etsysFWSessionTotalsLastChange | 1.3.6.1.4.1.5624.1.2.37.3.5 | TimeStamp | read-only | The sysUpTime at which the etsysFWSessionTotalsTable was last modified. |
| etsysFWSessionTotalsTable | 1.3.6.1.4.1.5624.1.2.37.3.6 | not-accessible | The firewall can perform stateful inspection of packets to allow incoming traffic associated with outgoing packets. These associations are sessions. This table returns data about the total sessions indexed by protocol-id (as defined by the assigned protocol-numbers of the IANA). | |
| etsysFWSessionTotalsEntry | 1.3.6.1.4.1.5624.1.2.37.3.6.1 | not-accessible | A row with the session counters for a particular protocol-id. | |
| I32 etsysFWSessTotIndex | 1.3.6.1.4.1.5624.1.2.37.3.6.1.1 | Integer32 | read-only | A unique index for this row. |
| U32 etsysFWSessTotProtocolID | 1.3.6.1.4.1.5624.1.2.37.3.6.1.2 | Unsigned32 | read-only | The protocol-id for this row. |
| C32 etsysFWSessTotActiveSessions | 1.3.6.1.4.1.5624.1.2.37.3.6.1.3 | Counter32 | read-only | The total number of active sessions for this protocol. |
| C32 etsysFWSessTotPeakSessions | 1.3.6.1.4.1.5624.1.2.37.3.6.1.4 | Counter32 | read-only | The peak number of sessions for this protocol since the last restart of the device. |
| C32 etsysFWSessTotBlockedSessions | 1.3.6.1.4.1.5624.1.2.37.3.6.1.5 | Counter32 | read-only | The total number of sessions that have been blocked for this protocol since the last restart of the device. |
| DAT etsysFWSessTotLastBlock | 1.3.6.1.4.1.5624.1.2.37.3.6.1.6 | DateAndTime | read-only | The date and time of the last blocked session for this protocol. |
| G32 etsysFWIpSessionNumEntries | 1.3.6.1.4.1.5624.1.2.37.3.7 | Gauge32 | read-only | The current number of entries in the etsysFWIpSessionTable. |
| TIM etsysFWIpSessionLastChange | 1.3.6.1.4.1.5624.1.2.37.3.8 | TimeStamp | read-only | The sysUpTime at which the etsysFWIpSessionTable was last modified. |
| etsysFWIpSessionTable | 1.3.6.1.4.1.5624.1.2.37.3.9 | not-accessible | The firewall can perform stateful inspection of packets to allow incoming traffic associated with outgoing packets. These associations are sessions. This table returns data about the current active sessions. | |
| etsysFWIpSessionEntry | 1.3.6.1.4.1.5624.1.2.37.3.9.1 | not-accessible | A row that defines an active session. | |
| I32 etsysFWIpSessionIndex | 1.3.6.1.4.1.5624.1.2.37.3.9.1.1 | Integer32 | read-only | A unique index for this row. |
| IPt etsysFWIpSessionIPVersion | 1.3.6.1.4.1.5624.1.2.37.3.9.1.2 | InetAddressType | read-only | The Internet Protocol version. The value of this property affects the size and format of the etsysFWIpSessionSrcAddress and etsysFWIpSessionDstAddress objects. |
| IP etsysFWIpSessionSrcAddress | 1.3.6.1.4.1.5624.1.2.37.3.9.1.3 | InetAddress | read-only | The source IP address of this session. |
| IP etsysFWIpSessionDstAddress | 1.3.6.1.4.1.5624.1.2.37.3.9.1.4 | InetAddress | read-only | The destination IP address of this session. |
| INE etsysFWIpSessionSrcPort | 1.3.6.1.4.1.5624.1.2.37.3.9.1.5 | InetPortNumber | read-only | The source port of this session. |
| INE etsysFWIpSessionDstPort | 1.3.6.1.4.1.5624.1.2.37.3.9.1.6 | InetPortNumber | read-only | The destination port of this session. |
| U32 etsysFWIpSessionProtocolID | 1.3.6.1.4.1.5624.1.2.37.3.9.1.7 | Unsigned32 | read-only | The protocol-id of this session (as defined by the assigned protocol-numbers of the IANA). |
| DAT etsysFWIpSessionCreation | 1.3.6.1.4.1.5624.1.2.37.3.9.1.8 | DateAndTime | read-only | The date and time this session was created. |
| G32 etsysFWAuthAddressNumEntries | 1.3.6.1.4.1.5624.1.2.37.3.10 | Gauge32 | read-only | The current number of entries in the etsysFWAuthAddressTable. |
| TIM etsysFWAuthAddressLastChange | 1.3.6.1.4.1.5624.1.2.37.3.11 | TimeStamp | read-only | The sysUpTime at which the etsysFWAuthAddressTable was last modified. |
| etsysFWAuthAddressTable | 1.3.6.1.4.1.5624.1.2.37.3.12 | not-accessible | The firewall has an action to allow traffic only to IP addresses that have authenticated with the firewall. After authentication, the authenticated address remains in a cache as long as there are packets from the address. This table returns the cached authenticated IP addresses. The table rows are removed when the IP address is idle for the number of seconds specified in etsysFWAuthTimeout. | |
| etsysFWAuthAddressEntry | 1.3.6.1.4.1.5624.1.2.37.3.12.1 | not-accessible | A row that defines an authenticated IP address. | |
| I32 etsysFWAuthAddressIndex | 1.3.6.1.4.1.5624.1.2.37.3.12.1.1 | Integer32 | read-only | A unique index for this row. |
| IPt etsysFWAuthAddressIPVersion | 1.3.6.1.4.1.5624.1.2.37.3.12.1.2 | InetAddressType | read-only | The Internet Protocol version. The value of this property affects the size and format of the etsysFWAuthAddressIPAddress object. |
| IP etsysFWAuthAddressIPAddress | 1.3.6.1.4.1.5624.1.2.37.3.12.1.3 | InetAddress | read-only | The authenticated IP address. |
| STR etsysFWAuthAddressGroupName | 1.3.6.1.4.1.5624.1.2.37.3.12.1.4 | SnmpAdminString | read-only | The group name of the authenticated IP address. |
| I32 etsysFWAuthAddressIdleTime | 1.3.6.1.4.1.5624.1.2.37.3.12.1.5 | Integer32 | read-only | The number of seconds this IP address has been idle. |
| G32 etsysFWDoSBlockedNumEntries | 1.3.6.1.4.1.5624.1.2.37.3.13 | Gauge32 | read-only | The current number of entries in the etsysFWDoSBlockedTable. |
| TIM etsysFWDoSBlockedLastChange | 1.3.6.1.4.1.5624.1.2.37.3.14 | TimeStamp | read-only | The sysUpTime at which the etsysFWDoSBlockedTable was last modified. |
| etsysFWDoSBlockedTable | 1.3.6.1.4.1.5624.1.2.37.3.15 | not-accessible | Firewalls can provide protection from some common forms of Denial of Service attacks. The firewall will return the total number of times the specific DoS attack has been blocked and the IP address and time of the last blocked attack. | |
| etsysFWDoSBlockedEntry | 1.3.6.1.4.1.5624.1.2.37.3.15.1 | not-accessible | A row that defines the statistics for a particular DoS attack. | |
| STR etsysFWDoSAttackName | 1.3.6.1.4.1.5624.1.2.37.3.15.1.1 | SnmpAdminString | read-only | The name of a DoS attack. Example names are 'SYN Flood', 'Tear Drop', and 'ICMP Flood'. |
| IPt etsysFWDoSSrcIPVersion | 1.3.6.1.4.1.5624.1.2.37.3.15.1.2 | InetAddressType | read-only | The Internet Protocol version. The value of this property affects the size and format of the etsysFWDoSScrIPAddress object. |
| IP etsysFWDoSSrcIPAddress | 1.3.6.1.4.1.5624.1.2.37.3.15.1.3 | InetAddress | read-only | The source IP address of the last blocked attack. |
| DAT etsysFWDoSAttackTime | 1.3.6.1.4.1.5624.1.2.37.3.15.1.4 | DateAndTime | read-only | The time of the last blocked attack. |
| C32 etsysFWDoSBlockedAttacks | 1.3.6.1.4.1.5624.1.2.37.3.15.1.5 | Counter32 | read-only | The number of times this DoS attack has been blocked since the last restart of the device. |
| etsysFirewallConformance | 1.3.6.1.4.1.5624.1.2.37.4 | |||
| etsysFirewallGroups | 1.3.6.1.4.1.5624.1.2.37.4.1 | |||
| etsysFWFirewallEnabledGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.1 | The Firewall Enabled Group. | ||
| etsysFWFirewallConfigGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.2 | The Firewall Configuration Group for general system parameters. | ||
| etsysFWFirewallIntfGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.3 | The Firewall on Interface Enabled Group for enabling the firewall on individual interfaces. | ||
| etsysFWSystemPolicyNameGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.4 | The System Policy Group Name Group. | ||
| etsysFWInterfacePolicyGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.5 | The Interface to Policy Table Group. | ||
| etsysFWGroupPolicyGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.6 | The Group Policy to Rule Definition Table Group. | ||
| etsysFWPolicyRuleDefGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.7 | The Policy Rule Definition Table Group. | ||
| etsysFWNetworkGroupGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.8 | The Network Group Network In Network Group Tables Group | ||
| etsysFWNetworkGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.9 | The Network Table Group. | ||
| etsysFWServiceGroupGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.10 | The Service Group in Servce Group Tables Group. | ||
| etsysFWServiceGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.11 | The Service Table Group. | ||
| etsysFWFilterGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.12 | The Filter Table Group. | ||
| etsysFWCLSFilterGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.13 | The CLS Filter Table Group. | ||
| etsysFWHTMLFilterGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.14 | The HTML Filter Table Group. | ||
| etsysFWPolicyRuleTrueGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.15 | The Policy Rule True Table Group. | ||
| etsysFWSessionTotalsGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.16 | The Firewall Session Totals Table Group. | ||
| etsysFWIpSessionGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.17 | The Firewall IP Sessions Table Group. | ||
| etsysFWAuthAddressGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.18 | The Firewall Authenticated Addresses Table Group. | ||
| etsysFWDoSBlockedGroup | 1.3.6.1.4.1.5624.1.2.37.4.1.19 | The Firewall DoS Blocked Attacks Table Group. | ||
| etsysFirewallCompliances | 1.3.6.1.4.1.5624.1.2.37.4.2 | |||
| etsysFirewallCompliance | 1.3.6.1.4.1.5624.1.2.37.4.2.1 | The compliance statement for devices that support the etsysFirewallMIB. |
RFC description
Vendor-private MIB for Enterasys Networks firewalls; manages firewall policy rules, session state, network definitions, and traffic filtering capabilities.
Start monitoring Enterasys Networks switch (legacy, later Extreme Networks) with integrated firewall with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.