All MIBs › NETSCREEN-ADDR-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: Firewall
Description: Manages Juniper NetScreen firewall address book objects and address group definitions used in security policies.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-ADDR-MIB?
This is a Juniper NetScreen (formerly NetScreen Technologies) enterprise MIB for managing the firewall's address book, the named IP address and domain objects used to build security policies on ScreenOS firewalls. It exposes configuration data, address name, virtual system (vsys), security zone, IP/domain value, netmask, and free-text comment, for every address-book entry rather than traffic or hardware counters. Monitoring this MIB is useful mainly for auditing firewall policy configuration and change tracking rather than hardware/software health, since it carries no uptime, temperature, CPU, or fault data. There is no strong dependency on other MIBs beyond the vendor's own NetScreen enterprise MIB tree and standard SNMP conventions. Typical deployment is on Juniper/NetScreen firewall appliances managed by network security teams who script address-book audits or synchronize policy objects. Engineers can download the NETSCREEN-ADDR-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-ADDR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall appliance
Monitoring Examples
A management tool would walk nsAddrTable/nsAddrEntry, keyed by nsAddrIndex, to enumerate nsAddrName, nsAddrZone, nsAddrIpOrDomain, and nsAddrNetmask for every configured object, optionally filtered by nsAddrVsys in multi-tenant deployments. Comparing snapshots of this table over time can detect unauthorized or unexpected address-book changes. nsAddrComment provides administrator-supplied context useful during configuration audits.
What Can Be Monitored
- configured address book entries
- address zone assignment
- IP address or domain value
- netmask
- virtual system (vsys) association
- entry comments
Imported Objects
From NETSCREEN-SMI
| netscreenAddr | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Manages firewall address book entries organized by zone, IP/domain, and netmask on Netscreen devices.
Start monitoring Juniper NetScreen firewall appliance (address book) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.