All MIBs › NETSCREEN-SET-WEB-MIB
Organization: Juniper Networks, Inc.
Last Updated: 2004-05-03
Category: Firewall
Description: Manages WebUI access settings, HTTP/HTTPS administration ports, and session limits on NetScreen ScreenOS firewalls.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is NETSCREEN-SET-WEB-MIB?
NETSCREEN-SET-WEB-MIB is a Juniper NetScreen (ScreenOS) private enterprise MIB that manages the device's own WebUI (HTTP/HTTPS management) settings, including per-virtual-system UI configuration, session idle timeout, listening ports, and SSL certificate/cipher choice. It exposes configuration objects (nsSetWebUICfgTable/Entry, nsSetWebPort, nsSetWebSSLPort, nsSetWebSSLCertificate) rather than performance counters, focused entirely on administrative access configuration. For monitoring software status, it is useful for verifying that management access is configured securely -- confirming the HTTPS port and SSL certificate/cipher in use (nsSetWebSSLCertificate, nsSetWebSSLCipher) and that idle sessions time out appropriately (nsSetWebIdleTimeout/nsSetWebTimeout) to reduce exposure from unattended admin sessions. It has no significant dependency on other standard MIBs, being a self-contained ScreenOS private extension. It is typically used for security-compliance auditing of management-plane access settings across a fleet of NetScreen firewalls, especially in multi-vsys deployments, and auditors can perform a NETSCREEN-SET-WEB-MIB download to load these configuration objects into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in NETSCREEN-SET-WEB-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Juniper NetScreen firewall
- NetScreen ScreenOS security appliance
Monitoring Examples
A security audit script walks nsSetWebUICfgTable/nsSetWebUICfgEntry across virtual systems (nsSetWebVsys) to confirm each vsys enforces HTTPS on nsSetWebSSLPort with an approved nsSetWebSSLCertificate and nsSetWebSSLCipher rather than allowing plain HTTP on nsSetWebPort. It also checks nsSetWebIdleTimeout to ensure idle admin sessions terminate within policy. Finding a vsys with HTTP still enabled or an unexpectedly long idle timeout flags a management-plane hardening gap.
What Can Be Monitored
- WebUI HTTP/HTTPS port configuration
- SSL certificate and cipher in use
- per-vsys WebUI settings
- admin session idle timeout
Imported Objects
From NETSCREEN-SMI
| netscreenSetting | OBJECT-IDENTITY |
| netscreenSettingMibModule | OBJECT-IDENTITY |
From SNMPv2-SMI
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString |
OIDs
RFC description
Monitors NetScreen web interface (WebUI) settings including timeout values, SSL ports, and certificates.
Start monitoring Juniper NetScreen firewall (WebUI/HTTPS management configuration) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.