HP-ICF-TLS-MIN-MIB

All MIBs › HP-ICF-TLS-MIN-MIB

Organization: HP Networking

Last Updated: 2017-05-11

Category: Domain: Security, Vendor: HP/HPE

Description: HP ICF SNMP MIB for enforcing minimum TLS protocol version requirements on management interfaces of HP ProCurve switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-ICF-TLS-MIN-MIB?

HP-ICF-TLS-MIN-MIB is an HP-specific MIB within HP's Integrated Communication Facility (ICF) product line, defining objects for enforcing a minimum TLS protocol version and ciphersuite restrictions on management interfaces of HP ProCurve switches. It exposes configuration objects controlling which TLS versions and ciphersuites are permitted for secure management access, rather than performance counters or fault traps. It is used to monitor the software/security configuration status of a switch's management plane, letting an admin check the configured minimum TLS version to confirm the device isn't accepting a weaker or deprecated TLS version than security policy requires. As part of the HP ICF private MIB family, it depends on HP's broader ICF enterprise MIB structure rather than a general IETF security MIB. It is typically deployed on HP ProCurve managed switches in enterprise networks needing to enforce a hardened minimum TLS version for secure remote management, and administrators can inspect its objects using an HP-ICF-TLS-MIN-MIB MIB Browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-ICF-TLS-MIN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP ProCurve managed switches

Monitoring Examples

No specific object or table names were provided for this module, so a precise polling example cannot be constructed with grounded identifiers. In practice, an admin would poll the configured minimum-TLS-version and allowed-ciphersuite objects on the switch's management interface to confirm the device is enforcing a modern security baseline. Finding a switch still permitting an older, deprecated TLS version would flag a compliance gap needing remediation.

What Can Be Monitored

minimum TLS protocol version setting
allowed ciphersuite configuration
management interface security configuration

Imported Objects

From HP-ICF-OID

hpSwitch

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpicfTlsMinMIB	1.3.6.1.4.1.11.2.14.11.5.1.112			This MIB module describes objects for enforcing TLS minimum version enforcement and ciphersuire enforcement in the HP Integrated Communication Facility product line.
hpicfTlsMinObjects	1.3.6.1.4.1.11.2.14.11.5.1.112.0
hpicfTlsMinConfigObjects	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1
hpicfTlsMinTable	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.1		not-accessible	A table of minimum TLS version objects
hpicfTlsMinEntry	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.1.1		not-accessible	An entry in the hpicfTlsMinTable.
INT hpicfTlsMinApp	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.1.1.1	INTEGER	not-accessible	This object specifies the application for which the minimum TLS version and cipher suite is enforced.
INT hpicfTlsMinVersion	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.1.1.2	INTEGER	read-create	This object specifies the minimum TLS version enforced. The default value for this attribute will be TLS1.1
T/F hpicfTlsMinCloseSSLSess	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.1.1.3	TruthValue	read-create	This object specifies whether or not to close existing SSL sessions. Setting this attribute to TRUE will close all existing SSL sessions. Setting this attribute to FALSE will not have any effect.
ROW hpicfTlsMinRowStatus	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.1.1.4	RowStatus	read-create	Status of this row, by which new entries may be created or existing entries deleted from this table.
hpicfTlsMinCipherTable	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.2		not-accessible	A table that contains a list of cipher suites that can be enforced or disabled for various applications.
hpicfTlsMinCipherEntry	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.2.1		not-accessible	An entry in the hpicfTlsMinTable that lists the lowest TLS version and cipher suites enforced or disabled for each application.
INT hpicfTlsMinCipher	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.2.1.1	INTEGER	not-accessible	This object specifies the cipher suite enforced for applications.
ROW hpicfTlsMinCipherRowStatus	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.2.1.2	RowStatus	read-create	Status of this row, by which new entries may be created or existing entries deleted from this table.
INT hpicfTlsMinCipherConfig	1.3.6.1.4.1.11.2.14.11.5.1.112.0.1.2.1.3	INTEGER	read-create	This object has to be configured to enforce or disable cipher suite for applications.
hpicfTlsMinConformance	1.3.6.1.4.1.11.2.14.11.5.1.112.1
hpicfTlsMinCompliances	1.3.6.1.4.1.11.2.14.11.5.1.112.1.1
hpicfTlsMinCompliance1	1.3.6.1.4.1.11.2.14.11.5.1.112.1.1.1			The compliance statement
hpicfTlsMinCompliance2	1.3.6.1.4.1.11.2.14.11.5.1.112.1.1.2			The compliance statement
hpicfTlsMinCompliance3	1.3.6.1.4.1.11.2.14.11.5.1.112.1.1.3			The compliance statement
hpicfTlsMinGroups	1.3.6.1.4.1.11.2.14.11.5.1.112.1.2
hpicfTlsMinConfigGroup	1.3.6.1.4.1.11.2.14.11.5.1.112.1.2.1			A collection of objects providing configuration for TLS minimum version and cipher suite enforcement for an app.
hpicfTlsMinConfigGroup1	1.3.6.1.4.1.11.2.14.11.5.1.112.1.2.2			A collection of objects providing configuration for TLS minimum version and cipher suite enforcement for an app.
hpicfTlsMinConfigGroup2	1.3.6.1.4.1.11.2.14.11.5.1.112.1.2.3			A collection of objects providing configuration for TLS minimum version and cipher suite enforcement for an app.

RFC description

Manages TLS minimum version enforcement and cipher suite configuration for HP Integrated Communication Facility switches.

Start monitoring HP ProCurve managed switch (minimum TLS version/ciphersuite enforcement) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-ICF-TLS-MIN-MIB

What Is HP-ICF-TLS-MIN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description