All MIBs › JUNIPER-NSM-TRAPS
Organization: Juniper Networks, Inc
Last Updated: 2005-06-30
Category: Alarm and Event Management, Domain: Network Management, Domain: Security, Vendor: Juniper
Description: Juniper Networks Security Manager (NSM) MIB defining SNMP traps and notifications for network security management events.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is JUNIPER-NSM-TRAPS?
This MIB defines the SNMP trap/notification objects forwarded by Juniper's NetScreen Security Manager (NSM), the legacy centralized management platform for ScreenOS/NetScreen firewalls (later folded into Juniper's broader security management line). It exposes event-metadata fields carried in traps: record and day identifiers, generated/received timestamps, managed device identity and IP, device domain, event category/subcategory, and source security zone/interface. Monitoring emphasis here is fundamentally fault/event-oriented rather than counter-polling — it relays security and system events (such as device state changes or policy hits) as traps, functioning as an alerting channel that reflects the software/operational status of managed firewalls rather than exposing hardware sensors directly. It works alongside NSM's own management protocol and reuses generic SNMP NOTIFICATION-TYPE conventions rather than depending on a specific IETF standard MIB. It is deployed at centralized NSM management servers correlating events from many NetScreen/SRX devices across an enterprise security deployment. Network engineers evaluating or troubleshooting this functionality can download the JUNIPER-NSM-TRAPS file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-NSM-TRAPS. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen/ScreenOS firewall managed via NSM
- Juniper SRX Series firewall (NSM-managed)
Monitoring Examples
An NSM trap receiver would parse nsmTrap notifications, using nsmDeviceIp and nsmDevice to identify the source firewall and nsmCategory/nsmSubcategory to classify the event type. Comparing nsmTimeGenerated against nsmTimeReceived can reveal delivery lag or clock skew between the managed device and the NSM server. nsmSrcZone and nsmSrcIfName pinpoint which security zone or interface triggered the event, while nsmRecordID and nsmDayID support de-duplication and sequencing of events in the NSM event database.
What Can Be Monitored
- security event category/subcategory
- device identity and IP generating the event
- event generation vs. receipt time
- source zone/interface of the event
Imported Objects
From JUNIPER-SMI
| jnxNsm | OBJECT-IDENTITY |
From SNMPv2-SMI
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DateAndTime | |
| DisplayString | |
| TEXTUAL-CONVENTION | |
| TruthValue |
OIDs
RFC description
Defines NetScreen Manager (NSM) trap notifications for Juniper security events and log information.
Start monitoring Juniper NetScreen/ScreenOS or SRX firewall managed via NSM with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.