NETRANGER

Description: Manages Cisco NetRanger (IDS) sensor configuration, event signatures, and intrusion detection alert notifications.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

NETRANGER is a Cisco-specific SNMP MIB for the Cisco NetRanger intrusion detection system (IDS) sensor product line, later known as Cisco Secure IDS. It exposes objects for security event/alarm records, including message type, timestamps, source/destination application and host identifiers, and error conditions generated by the sensor's detection engine. Rather than classic hardware counters, its primary monitoring value is software/security status: it lets an operator track intrusion alerts, signature matches, and sensor-reported errors in near real time via SNMP notifications. It is tied to Cisco's broader security management framework (referenced wheelgroup/securityMgmt/networkMgmt structure), implying dependence on Cisco enterprise MIB conventions for organization and notification delivery. It was deployed in enterprise perimeter security environments where NetRanger sensors monitored network segments for attack signatures and forwarded alerts to a central management console. Engineers can download the NETRANGER file directly to load it into their MIB browser.

A security operations center would consume notifications carrying recordId, globalTime, and errorMessage to correlate a specific alert event with the sensor (hostId, orgId) that generated it. The appId and sourceAppId fields let an analyst distinguish alerts raised by the sensor's own detection process from those relayed from another application, while dateString/timeString provide human-readable event timing for incident timelines. A burst of records sharing the same sourceHostId would indicate a sustained attack or scan targeting a specific host.

NetRanger intrusion detection system trap variables and security management objects.