All MIBs › NETSCREEN-SET-URL-FILTER-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: Firewall
Description: Configures URL filtering policy, blocked categories, and web filter server settings on Juniper NetScreen firewalls.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-URL-FILTER-MIB?
NETSCREEN-SET-URL-FILTER-MIB is a Juniper NetScreen (ScreenOS) private enterprise MIB that configures and reports on the device's web/URL filtering subsystem, including integration with an external filtering service such as Websense. It exposes objects for the URL filter server's name, port, and communication timeout, as well as the server's connectivity status and the fallback/block-message behavior when filtering is unavailable. This is primarily a software-status MIB: nsSetUrlServerStatus reports whether the external URL-filtering server is reachable, and nsSetUrlSerLostHdlWay reports how the firewall behaves (block or permit) when that connection is lost, both important operational health signals for content-filtering enforcement. It has an implicit dependency on a third-party URL rating service (e.g., Websense) whose reachability it tracks rather than on another SNMP MIB. It is typically used in enterprise firewall deployments that enforce corporate web-usage policy through an integrated or Websense-based URL categorization service, and administrators can download the NETSCREEN-SET-URL-FILTER-MIB file to load into their MIB browser for reference.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-URL-FILTER-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall
- NetScreen ScreenOS security appliance
Monitoring Examples
An administrator polls nsSetUrlServerStatus to verify the configured nsSetUrlServerName/nsSetUrlServerPort Websense server is currently reachable within the nsSetUrlCommTimeout window. If the status goes down, nsSetUrlSerLostHdlWay indicates whether the firewall is now blocking or permitting web traffic by default, and nsSetUrlNsBlockMsg/nsSetUrlBlockMsgType show what block page users receive. This lets an admin catch a failed URL-filtering integration before it silently opens or blocks unfiltered web access enterprise-wide.
What Can Be Monitored
- URL filter server reachability
- URL filter server address and port
- communication timeout setting
- fail-open/fail-closed behavior on server loss
- block message configuration
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
URL filtering configuration monitoring via Websense server integration for firewalls and security appliances.
Start monitoring Juniper NetScreen firewall (URL/web-filtering subsystem) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.