All MIBs › JUNIPER-LSYSSP-POLICY-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2010-05-19
Category: Domain: Security, Vendor: Juniper
Description: Provides managed objects for security policy resource limits per logical system security profile on Juniper Networks SRX devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is JUNIPER-LSYSSP-POLICY-MIB?
JUNIPER-LSYSSP-POLICY-MIB is a Juniper Networks MIB for SRX-series security devices, covering security policy resource limits within Logical System (LSYS) security profiles -- a feature that partitions a single physical SRX firewall into multiple virtual logical systems, each with its own resource quotas. It exposes configuration and monitoring data for security-policy-specific resource quotas and their current utilization within each logical system's security profile. This MIB is oriented toward monitoring software/configuration resource consumption rather than physical hardware -- specifically how many security-policy resources a logical system is consuming relative to its configured quota -- helping detect a logical system approaching or exceeding its policy resource limit. It is part of Juniper's broader LSYS/security-profile MIB family and depends on companion Juniper enterprise MIBs that define the underlying logical-system and security-profile framework. It is deployed in multi-tenant or departmentally-partitioned SRX firewall environments where administrators must ensure no single logical system exhausts shared security policy resources, and this JUNIPER-LSYSSP-POLICY-MIB guide summarizes the relevant resource-quota objects.
IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-LSYSSP-POLICY-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper Networks SRX series firewalls (logical systems)
Monitoring Examples
No object names were available for this module, but a realistic scenario would involve polling per-logical-system security policy resource counters to confirm actual policy usage remains below the configured quota for each LSYS profile; a logical system's policy count approaching its limit would signal a need to raise the quota or prune unused policies before new policy creation starts failing.
What Can Be Monitored
- security policy resource quota per logical system
- current policy resource utilization
- logical system security profile configuration
Imported Objects
From JUNIPER-LSYS-SECURITYPROFILE-MIB
| jnxLsysSpPolicy | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Juniper logical system security profile policy MIB for managing security policy resource quotas and limits.
Start monitoring Juniper SRX series firewall (logical-system security-policy quota) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.