INTEL-FIREWALL-MIB

Description: Intel firewall MIB providing SNMP objects for monitoring connection tables, policy counters, and security events on Intel firewall appliances.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

INTEL-FIREWALL-MIB is an Intel vendor MIB for monitoring firewall appliances, exposing a live connection/session table that tracks the state of traffic flows passing through the firewall's policy engine. Its firewallSessionTable records, per active session, the ingress interface, traffic direction, source and destination addresses and ports, protocol, and current session state, along with a last-update timestamp. Its monitoring value centers on real-time security/software status: administrators can poll firewallSessionTable to see current connection counts and states, spot unexpectedly long-lived or stalled sessions (via firewallSessionLastUpdate), and audit which source/destination pairs and protocols are actively passing through the firewall, which helps detect policy misconfigurations, connection-table exhaustion, or suspicious traffic patterns. As a security-appliance MIB it likely depends on standard IF-MIB for firewallSessionIpIfIndex interface references rather than defining its own interface model. It is deployed on Intel-branded firewall appliances in enterprise perimeter or internal network-segmentation security deployments. Engineers can download the INTEL-FIREWALL-MIB file directly to load it into their MIB browser.

An administrator walks firewallSessionTable, keyed by firewallSessionIpIfIndex and firewallSessionNumber, filtering on firewallSessionSourceAddr and firewallSessionDestAddr to see which hosts have active connections through the firewall. A spike in the total number of entries with firewallSessionState stuck in an established-but-idle condition and an old firewallSessionLastUpdate would indicate the session table is filling with stale connections, a precursor to connection-table exhaustion and potential denial of new traffic.

Intel firewall system MIB for monitoring active sessions and network security information.