NAI-MIB

Description: Defines NAI security product enterprise objects and registration hierarchy.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

NAI-MIB is a vendor-specific MIB from Network Associates, Inc. (NAI, a security-software vendor now part of McAfee) defining an enterprise trap structure and registration hierarchy used by NAI's security products. It belongs to the security/antivirus software technology area. It exposes trap-oriented objects — agent identity/version, alarm severity, description, source address/DNS name, and GMT/local timestamps plus a reference URL — used to carry alert information in SNMP traps rather than a large table of pollable runtime state. Its monitoring value is almost entirely software/event-status oriented: it reports the severity and description of a security alert/alarm raised by an NAI product (e.g., a detected threat or scan result), including when and from where it originated, rather than any physical hardware metric. It functions as a standalone enterprise trap MIB without deep dependency on other MIBs beyond the base SNMPv2-SMI/TRAP conventions. It's deployed wherever NAI/McAfee security agents are configured to forward alerts to an SNMP trap receiver/NMS, and the NAI-MIB MIB defines the exact trap varbinds a receiver must decode to surface those security alerts.

An NMS would receive an naiStandardTrap containing naiTrapAgent and naiTrapAgentVersion identifying which NAI product and version raised the alert, naiTrapSeverity and naiTrapDescription describing what happened, and naiTrapAlarmSourceAddress/naiTrapAlarmSourceDNSName identifying the affected host. The naiTrapGMTTime/naiTrapLocalTime objects timestamp the event and naiTrapURL may point to further detail. A trap with high naiTrapSeverity and a naiTrapDescription referencing a detected virus/malware event would prompt immediate investigation of the named source host.

NAI standard trap MIB for alarm generation with severity levels and alarm source identification.