HPN-ICF-FIREWALL-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › HPN-ICF-FIREWALL-MIB

Last Updated: 2008-01-17

Category: Domain: Security, Vendor: H3C/HH3C, Vendor: HP/HPE

Description: Monitors firewall policy statistics, session tables, and attack-prevention counters on HP/Comware security devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HPN-ICF-FIREWALL-MIB?

HPN-ICF-FIREWALL-MIB monitors firewall performance and capacity on HP Networking (H3C Comware-based) firewall/security appliances, exposing connection-table and session-rate statistics used to gauge whether the firewall is approaching its processing limits. It provides hpnicfFWMaxConnNum (the configured maximum concurrent connection capacity), hpnicfFWConnNumCurr (current active connection count), and hpnicfFWConnRate (new-connection establishment rate), organized under global statistics and firewall specification object groups. Its core monitoring use is tracking software/performance status under load: comparing current versus maximum connections reveals how close the firewall is to exhausting its session table, while connection-rate spikes can indicate a SYN-flood or DDoS-style attack in progress. It's a vendor-specific MIB without a strong direct IETF dependency, though it plays a similar role to standard firewall/session MIBs. It is deployed on HP Networking firewall appliances protecting enterprise network perimeters or data center segments. Engineers can download the HPN-ICF-FIREWALL-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-FIREWALL-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • HP Networking firewall appliance

Monitoring Examples

A security team polling hpnicfFWConnNumCurr against hpnicfFWMaxConnNum can alert when utilization crosses 80-90% of session capacity, indicating the firewall risks dropping new legitimate connections; a sudden sustained spike in hpnicfFWConnRate without a corresponding rise in expected traffic is a strong signal of an active connection-flood attack.

What Can Be Monitored

  • current vs. maximum concurrent connections
  • new connection establishment rate
  • global firewall statistics

This MIB depends on

Related MIBs

Imported Objects

From HPN-ICF-OID-MIB

hpnicfCommonOBJECT-IDENTITY

From SNMPv2-SMI

Gauge32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using hpnicfFWConnNumCurr OID:

Select an HP Networking firewall appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfFWConnNumCurr into the Find box to locate it in the OID tree, then select it and click OK. The number of connections that currently exist. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Gauge32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Firewall statistics and connection management for HP Networking ICF firewalls.

Start monitoring HP Networking firewall appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HPN-ICF-FIREWALL-MIB