All MIBs › FORTINET-FORTIWEB-MIB
Organization: Fortinet Technologies, Inc.
Last Updated: 2017-11-17
Category: Domain: Security, Vendor: Fortinet
Description: Fortinet FortiWeb MIB providing SNMP management objects for the FortiWeb web application firewall including policy status and attack statistics.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is FORTINET-FORTIWEB-MIB?
FORTINET-FORTIWEB-MIB is a Fortinet enterprise MIB for the FortiWeb web application firewall (WAF) appliance, providing management objects covering system status, HA mode, operating mode, and per-CPU utilization. It exposes hardware/software status data including per-core CPU usage (via cPUTable/cPUEntry), CPU frequency, memory usage, HA mode, and operating mode (e.g. reverse proxy vs. transparent), plus system identity fields like model and firmware version. Its clear monitoring role is device health: fwSysCpuUsage and fwSysMemUsage reveal resource exhaustion under heavy WAF inspection load, fwSysHaMode/fwSysOpMode confirm the appliance's clustering and deployment mode, and fwSysVersion tracks firmware version for patch compliance. It shares the common Fortinet enterprise MIB structure used across FortiGate and FortiAuthenticator products but is otherwise self-contained. It is typically deployed in front of web application servers in data centers or cloud edge environments to protect HTTP/HTTPS traffic, making FORTINET-FORTIWEB-MIB SNMP monitoring a routine part of tracking WAF appliance health under load.
IPNetwork Monitor allows you to monitor SNMP objects defined in FORTINET-FORTIWEB-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Fortinet FortiWeb web application firewall appliance
Monitoring Examples
An administrator would poll cPUTable/cPUEntry (indexed by cPUIndex) to retrieve per-core cPUusage values and detect a specific CPU core pegged near 100% during a traffic spike or attack, and check fwSysMemUsage for memory pressure from deep packet inspection buffers. fwSysHaMode would be checked to confirm both nodes in an HA pair report the expected active/standby role, and fwSysOpMode confirms whether the unit is running in reverse-proxy or transparent inspection mode. A jump in fwSysCpuUsage correlated with a spike in blocked-attack counters would indicate the WAF is under an active attack requiring investigation.
What Can Be Monitored
- per-CPU usage
- CPU frequency
- memory usage
- HA mode
- operating mode
- firmware version
Imported Objects
From FORTINET-CORE-MIB
| fnSysSerial | OBJECT-TYPE |
| fortinet | MODULE-IDENTITY |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-MIB
| sysName | OBJECT-TYPE |
From SNMPv2-SMI
| Counter32 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| TEXTUAL-CONVENTION |
How to Use in IPNetwork Monitor
Example using fwSysCpuUsage OID:
OIDs
RFC description
MIB module for Fortinet FortiWeb web application firewalls with support for various deployment modes and platforms.
Start monitoring Fortinet FortiWeb web application firewall (WAF) appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.