ENTERASYS-THREAT-NOTIFICATION-MIB

Description: Enterasys Networks Threat Notification MIB for generating SNMP traps when network security threats or incidents are detected.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

This is an Enterasys Networks enterprise MIB dedicated to the vendor's Threat Notification feature, which generates SNMP traps when a network security threat or incident is detected on the device. It exposes fault/event data describing the detected threat, including sender identity and name, threat category and name, and address information (device, initiator, and target addresses with their address types) plus an interface index locating where the threat was observed. Its entire purpose is security event monitoring rather than hardware or performance telemetry, giving administrators near-real-time visibility into detected attacks, worms, or policy violations flagged by the device's threat detection logic. No dependency on another standard MIB is indicated; it is a self-contained enterprise trap-oriented MIB. It is deployed in enterprise security-conscious network environments where Enterasys switches/appliances perform inline or passive threat detection and need to alert a central SNMP management station. Network engineers evaluating or troubleshooting this functionality can download the ENTERASYS-THREAT-NOTIFICATION-MIB file directly to load it into their MIB browser.

A security operations team would subscribe to traps carrying etsysThreatNotificationThreatCategory and etsysThreatNotificationThreatName to be alerted the moment a threat is classified, then use etsysThreatNotificationInitiatorAddress and etsysThreatNotificationTargetAddress to identify the attacking and victim hosts. The etsysThreatNotificationDeviceIfIndex object pinpoints which switch interface the threat traffic traversed, letting the team quickly locate and potentially isolate the affected port, while etsysThreatNotificationConsolidatedData can bundle multiple related threat events into a single summarized notification.

Vendor-private Enterasys Networks MIB for threat-related notifications in enterprise network management and monitoring infrastructure.