JUNIPER-JS-UTM-AV-MIB

All MIBs › JUNIPER-JS-UTM-AV-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2011-02-08

Category: Domain: Security, VPN and Security, Vendor: Juniper

Description: Provides managed objects for Unified Threat Management (UTM) antivirus scanning statistics on Juniper Networks SRX security devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-JS-UTM-AV-MIB?

JUNIPER-JS-UTM-AV-MIB is a Juniper Networks, Inc. proprietary MIB (built on JUNIPER-JS-SMI) for the enterprise-specific UTM (Unified Threat Management) antivirus feature. Its objects cover an AV-engine type, current pattern-version string, database type, and scan-code counters (clean, infected, protected/encrypted, decompress-error, corrupted, no-resource, internal error, max-content-size exceeded, too-many-requests, timeout, engine-not-ready), plus a per-engine table and a per-engine stats table mirroring the same scan-code breakdown. As a security/performance MIB it lets an administrator watch antivirus scan outcomes and catch engine-not-ready or timeout conditions on a Juniper UTM appliance. It is deployed on Juniper Networks UTM (antivirus) security appliances. Engineers can download the JUNIPER-JS-UTM-AV-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-JS-UTM-AV-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks UTM (antivirus) security appliances

Monitoring Examples

An administrator checks jnxJsUTMAVScanCodeInfected and jnxJsAVScanCodeEngineNotReady to watch antivirus scan outcomes on a Juniper UTM appliance.

What Can Be Monitored

antivirus scan-outcome counters and engine readiness

Imported Objects

From JUNIPER-JS-SMI

jnxJsUTMRoot

OBJECT-IDENTITY

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxJsAntiVirus	1.3.6.1.4.1.2636.3.39.1.13.1			This module defines the MIB for Juniper Enterprise specific antivirus functionality. Juniper documentation is recommended as the reference.
jnxJsAntiVirusTrapsPrefix	1.3.6.1.4.1.2636.3.39.1.13.1.0
NTF jnxJsAvPatternUpdateTrap	1.3.6.1.4.1.2636.3.39.1.13.1.0.1			This traps is raised when the Anti-Virus pattern database is updated successfully.
jnxJsAntiVirusObjects	1.3.6.1.4.1.2636.3.39.1.13.1.1
jnxJsAntiVirusEngine	1.3.6.1.4.1.2636.3.39.1.13.1.1.1
INT jnxJsAVEngineType	1.3.6.1.4.1.2636.3.39.1.13.1.1.1.1	INTEGER	read-only	The scan engine type in use. User can use CLI to set the engine type to either full AV (kaspersky-lab-engine), express AV (juniper-express-engine) or Sophos AV (sophos-engine). If AV is not configured then engine type is not known.
STR jnxJsAVCurrentPatternVersionString	1.3.6.1.4.1.2636.3.39.1.13.1.1.1.2	DisplayString	read-only	Anti-Virus pattern database version currently in use.
INT jnxJsAVDatabaseType	1.3.6.1.4.1.2636.3.39.1.13.1.1.1.3	INTEGER	read-only	The Database type in use. User can use CLI to set the engine type to full AV, express AV or Sophos AV. Corresponding database types are Full for KL Engine, Express for Juniper Express Engine and Sophos for Sophos AV Engine.
jnxJsAntiVirusStats	1.3.6.1.4.1.2636.3.39.1.13.1.1.2
I32 jnxJsAVScanCodeClean	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.1	Integer32	read-only	Number of requests passed Anti-Virus scan.
I32 jnxJsAVScanCodeInfected	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.2	Integer32	read-only	Number of requests found infected by Anti-Virus scan engine.
I32 jnxJsAVScanCodeProtected	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.3	Integer32	read-only	Number of requests cannot be scanned due to protected by password.
I32 jnxJsAVScanCodeDecompress	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.4	Integer32	read-only	Number of requests cannot be scanned due to exceeding max decmopress layer.
I32 jnxJsAVScanCodeCorrupted	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.5	Integer32	read-only	Number of requests cannot be scanned due to file corrupted.
I32 jnxJsAVScanCodeNoResource	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.6	Integer32	read-only	Number of requests cannot be scanned due to out-of-resource.
I32 jnxJsAVScanCodeInternalError	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.7	Integer32	read-only	Number of requests cannot be scanned due to internal error.
I32 jnxJsAVScanCodeMaxContentSize	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.8	Integer32	read-only	Number of requests cannot be scanned due to exceeding max content size limit.
I32 jnxJsAVScanCodeTooManyReq	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.9	Integer32	read-only	Number of requests cannot be scanned due to exceeding maximum requests limit.
I32 jnxJsAVScanCodeTimeout	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.10	Integer32	read-only	Number of requests cannot be scanned due to scan timeout.
I32 jnxJsAVScanCodeEngineNotReady	1.3.6.1.4.1.2636.3.39.1.13.1.1.2.11	Integer32	read-only	Number of requests cannot be scanned due to scan engine not ready.
jnxJsUTMAntiVirusEngine	1.3.6.1.4.1.2636.3.39.1.13.1.1.3		not-accessible	Table of anti-virus engine objects.
jnxJsUTMAntiVirusEngineEntry	1.3.6.1.4.1.2636.3.39.1.13.1.1.3.1		not-accessible	Entry for anti-virus engine table.
I32 jnxJsUTMAVEngineIndex	1.3.6.1.4.1.2636.3.39.1.13.1.1.3.1.1	Integer32	not-accessible	Index is the cluster node number. If the device is not in a cluster mode then it will be the local node number.
INT jnxJsUTMAVEngineType	1.3.6.1.4.1.2636.3.39.1.13.1.1.3.1.2	INTEGER	read-only	The scan engine type in use. User can use CLI to set the engine type to either full AV (kaspersky-lab-engine), express AV (juniper-express-engine) or Sophos AV (sophos-engine). If AV is not configured then engine type is not known.
STR jnxJsUTMAVPatternVersionString	1.3.6.1.4.1.2636.3.39.1.13.1.1.3.1.3	DisplayString	read-only	Anti-Virus pattern database version currently in use.
INT jnxJsUTMAVDatabaseType	1.3.6.1.4.1.2636.3.39.1.13.1.1.3.1.4	INTEGER	read-only	The Database type in use. User can use CLI to set the engine type to full AV, express AV or Sophos AV. Corresponding database types are Full for KL Engine, Express for Juniper Express Engine and Sophos for Sophos AV Engine.
jnxJsUTMAntiVirusStats	1.3.6.1.4.1.2636.3.39.1.13.1.1.4		not-accessible	Table of anti-virus stats objects.
jnxJsUTMAntiVirusStatsEntry	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1		not-accessible	Entry of anti-virus stats object.
I32 jnxJsUTMAVStatsIndex	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.1	Integer32	not-accessible	Index is the cluster node number. If the device is not in a cluster mode then it will be the local node number.
I32 jnxJsUTMAVScanCodeClean	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.2	Integer32	read-only	Number of requests passed Anti-Virus scan.
I32 jnxJsUTMAVScanCodeInfected	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.3	Integer32	read-only	Number of requests found infected by Anti-Virus scan engine.
I32 jnxJsUTMAVScanCodeProtected	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.4	Integer32	read-only	Number of requests cannot be scanned due to protected by password.
I32 jnxJsUTMAVScanCodeDecompress	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.5	Integer32	read-only	Number of requests cannot be scanned due to exceeding max decmopress layer.
I32 jnxJsUTMAVScanCodeCorrupted	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.6	Integer32	read-only	Number of requests cannot be scanned due to file corrupted.
I32 jnxJsUTMAVScanCodeNoResource	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.7	Integer32	read-only	Number of requests cannot be scanned due to out-of-resource.
I32 jnxJsUTMAVScanCodeInternalError	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.8	Integer32	read-only	Number of requests cannot be scanned due to internal error.
I32 jnxJsUTMAVScanCodeMaxContentSize	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.9	Integer32	read-only	Number of requests cannot be scanned due to exceeding max content size limit.
I32 jnxJsUTMAVScanCodeTooManyReq	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.10	Integer32	read-only	Number of requests cannot be scanned due to exceeding maximum requests limit.
I32 jnxJsUTMAVScanCodeTimeout	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.11	Integer32	read-only	Number of requests cannot be scanned due to scan timeout.
I32 jnxJsUTMAVScanCodeEngineNotReady	1.3.6.1.4.1.2636.3.39.1.13.1.1.4.1.12	Integer32	read-only	Number of requests cannot be scanned due to scan engine not ready.
jnxJsAntiVirusTraps	1.3.6.1.4.1.2636.3.39.1.13.1.2
jnxJsAntiVirusTrapVars	1.3.6.1.4.1.2636.3.39.1.13.1.3
STR jnxAVPatternVersionString	1.3.6.1.4.1.2636.3.39.1.13.1.3.1	DisplayString	accessible-for-notify	Anti-Virus last successfully updated pattern database version.
STR jnxAVPatternTimestamp	1.3.6.1.4.1.2636.3.39.1.13.1.3.2	DisplayString	accessible-for-notify	Anti-Virus last successfully updated pattern database timestamp.

RFC description

Antivirus engine functionality and pattern version management for Juniper security devices.

Start monitoring Juniper Networks UTM (antivirus) security appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-JS-UTM-AV-MIB

What Is JUNIPER-JS-UTM-AV-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description