All MIBs › JUNIPER-LSYSSP-POLICYWCNT-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2010-05-19
Category: Domain: Security, Vendor: Juniper
Description: Defines managed objects for security policy with counter resource limits per logical system security profile on Juniper Networks SRX devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is JUNIPER-LSYSSP-POLICYWCNT-MIB?
JUNIPER-LSYSSP-POLICYWCNT-MIB is a Juniper Networks vendor MIB defining managed objects for security "policy-with-count" resource limits within a Logical System (LSYS) security profile on Juniper SRX firewalls. It exposes configuration and usage data for a specific security-policy resource type that tracks packet/session counts per policy, as part of the broader LSYS resource-quota framework described in its module text. It is used to monitor the software/configuration status of firewall resource allocation, letting an admin check whether a logical system's allotted policy-with-count quota is nearing its limit, which if exhausted could prevent new security policies from being created or counted correctly in that logical system. It is part of a family of related Juniper LSYS security-profile MIBs covering other resource types, so it depends on the broader Juniper LSYS security-profile MIB framework for logical-system and profile indexing conventions. It is typically deployed on Juniper SRX firewalls configured with multiple logical systems, i.e. multi-tenant firewall environments needing per-tenant resource quota monitoring. Engineers can download the JUNIPER-LSYSSP-POLICYWCNT-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-LSYSSP-POLICYWCNT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper Networks SRX firewalls with Logical Systems (LSYS)
Monitoring Examples
No specific object or table names were provided for this module, so a precise polling example cannot be constructed with grounded identifiers. In general, an admin managing a multi-tenant SRX firewall would poll this MIB's resource-usage and quota-limit objects for the security policy-with-count profile to detect when a given logical system's tenant is approaching its allotted policy-count resource limit. Repeatedly hitting that quota ceiling would explain why new security policies fail to provision for that tenant.
What Can Be Monitored
- security policy-with-count resource usage
- logical system resource quota limits
- policy count profile configuration
Imported Objects
From JUNIPER-LSYS-SECURITYPROFILE-MIB
| jnxLsysSpPolicywcnt | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Manages policy-with-count security profile resources for Juniper logical systems.
Start monitoring Juniper Networks SRX firewalls with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.