H3C-FIREWALL-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › H3C-FIREWALL-MIB

Organization: Hangzhou H3C Tech. Co., Ltd.

Last Updated: 2008-01-17

Category: VPN and Security, Vendor: H3C/HH3C

Description: H3C MIB for firewall policy management including security zones, rules, session tables, and traffic statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-FIREWALL-MIB?

This is an H3C enterprise MIB for managing and monitoring H3C firewall appliances, covering firewall object definitions, security-zone/policy specs, session-table statistics, and global traffic counters. It exposes objects for maximum and current concurrent connection counts, along with global statistics on firewall activity and per-feature specification branches. It directly supports monitoring the operational health and load of the firewall's software, most notably current session/connection load against configured maximum capacity, a key signal of whether the firewall is approaching resource exhaustion or under high traffic/attack load. It is a self-contained enterprise MIB for H3C's firewall product line without an evident dependency on other standard MIBs. It is deployed on H3C firewall appliances at network perimeters or data-center edges, where security operations poll connection counts and global stats to detect capacity issues or traffic anomalies such as DoS conditions. Engineers can download the H3C-FIREWALL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-FIREWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • H3C firewall appliance

Monitoring Examples

An operator polls h3cFWConnNumCurr against the configured h3cFWMaxConnNum to see how close the firewall is to its maximum concurrent-session capacity; a value approaching the maximum, especially with a sudden spike, is a strong indicator of a connection-flood or DoS attack in progress. Objects under h3cFirewallGlobalStats give aggregate traffic/session statistics for the device, while h3cFirewallSpecs and h3cFirewallobject expose the firewall's capability/specification data used to interpret those counters correctly.

What Can Be Monitored

  • current concurrent connections
  • maximum connection capacity
  • global firewall traffic statistics
  • firewall specifications/capabilities

This MIB depends on

Related MIBs

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommonOBJECT-IDENTITY

From SNMPv2-SMI

Gauge32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using h3cFWConnNumCurr OID:

Select an H3C firewall appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cFWConnNumCurr into the Find box to locate it in the OID tree, then select it and click OK. The number of connections that currently exist. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Gauge32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Manages H3C firewall statistic information including connection counts and global statistics.

Start monitoring H3C firewall appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-FIREWALL-MIB