PCA-Alert-MIB

All MIBs › PCA-Alert-MIB

Category: Environmental Monitoring

Description: Monitors PC-based system alert conditions including hardware thresholds, sensor readings, and alert notification objects.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is PCA-Alert-MIB?

PCA-Alert-MIB is a vendor-specific SNMP module associated with Symantec's pcAnywhere remote control software (as reflected by its symantec, pcanywhere, and pcaversionnine identifiers), used to expose data about remote-control sessions and file transfers between a host and remote computer. It defines objects describing the connected host and remote computer names, connection objects, and detailed file transfer activity including source/destination filenames, byte counts, and operation type. Despite its "Alert" name, its monitoring value centers on software/session status rather than hardware sensors: it reports active remote connections, encryption level in use, and notably a virus-scan flag (xferVirusFlag) on transferred files, letting administrators detect risky file transfers or unencrypted remote sessions. No strong dependency on other standard MIBs is evident; it is a self-contained application-level monitoring module. It is deployed on machines running pcAnywhere host/remote software where IT security teams want visibility into remote-access sessions and file transfer activity for compliance or security auditing. Engineers can download the PCA-Alert-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in PCA-Alert-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Windows PC running Symantec pcAnywhere host/remote software

Monitoring Examples

An administrator polls hostConnectionObject and remoteConnectionObject alongside hostComputerName/remoteComputerName to see which machines currently have an active pcAnywhere remote-control session. Checking hostEncryptionLevel confirms whether the session is using strong encryption, while xferFiles and xferBytes reveal ongoing file transfer volume between the two ends. A transferred file showing xferVirusFlag set during an xferOperation would immediately flag a potentially malicious file moved through the remote session, prompting a security review.

What Can Be Monitored

active remote connection status
session encryption level
file transfer activity/byte counts
transferred file virus-scan flag
source/destination file names

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC-1215

TRAP-TYPE

From RFC1155-SMI

enterprises

From RFC1213-MIB

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
symantec	1.3.6.1.4.1.393
pcanywhere	1.3.6.1.4.1.393.100
pcaversionnine	1.3.6.1.4.1.393.100.9
pcaHost	1.3.6.1.4.1.393.100.9.1
NTF pcaHostStarted	1.3.6.1.4.1.393.100.9.1.0.1			PCA Host was started
NTF pcaHostEndSession	1.3.6.1.4.1.393.100.9.1.0.2			PCA Host has shut down
NTF pcaHostAbnormalEnd	1.3.6.1.4.1.393.100.9.1.0.3			PCA Host has shut down abnormally
NTF pcaHostConnFailDeviceError	1.3.6.1.4.1.393.100.9.1.0.4			PCA Host connection failed - device error
NTF pcaHostStopped	1.3.6.1.4.1.393.100.9.1.0.5			PCA Host was stopped
NTF pcaHostInSession	1.3.6.1.4.1.393.100.9.1.0.6			PCA Host is in session
NTF pcaHostConnFailAccessDenied	1.3.6.1.4.1.393.100.9.1.0.7			PCA Host connection failed - access denied
NTF pcaHostConnFailEncrypt	1.3.6.1.4.1.393.100.9.1.0.8			PCA Host connection failed - encryption error
NTF pcaHostUnsecuredHostStarted	1.3.6.1.4.1.393.100.9.1.0.9			Unsecure launch of PCA Host
NTF pcaHostRebooting	1.3.6.1.4.1.393.100.9.1.0.10			PCA Host rebooting the system
NTF pcaHostLockingWorkstation	1.3.6.1.4.1.393.100.9.1.0.11			PCA Host locking workstation
NTF pcaHostLoggingOffUser	1.3.6.1.4.1.393.100.9.1.0.12			PCA Host is logging off the current user
pcaRemote	1.3.6.1.4.1.393.100.9.2
NTF pcaRemoteStarted	1.3.6.1.4.1.393.100.9.2.0.1			PCA Remote was started
NTF pcaRemoteInSession	1.3.6.1.4.1.393.100.9.2.0.2			PCA Remote is in session
NTF pcaRemoteEndSession	1.3.6.1.4.1.393.100.9.2.0.3			PCA Remote has ended the session
NTF pcaRemoteAbnormalEndSession	1.3.6.1.4.1.393.100.9.2.0.4			PCA Remote has ended the session abnormally
NTF pcaRemoteConnFailDeviceError	1.3.6.1.4.1.393.100.9.2.0.5			PCA Remote connection failure - device error
NTF pcaRemoteConnFailHostBusy	1.3.6.1.4.1.393.100.9.2.0.6			PCA Remote connection failure - host busy
NTF pcaRemoteConnFailHostNotFound	1.3.6.1.4.1.393.100.9.2.0.7			PCA Remote connection failure - host not found
NTF pcaRemoteConnFailBadPassword	1.3.6.1.4.1.393.100.9.2.0.8			PCA Remote connection failure - bad password
NTF pcaRemoteConnFailEncryption	1.3.6.1.4.1.393.100.9.2.0.9			PCA Remote connection failure - encryption error
pcaFileXfer	1.3.6.1.4.1.393.100.9.3
NTF pcaFileXferStarted	1.3.6.1.4.1.393.100.9.3.0.1			PCA File Transfer started
NTF pcaFileXferEnded	1.3.6.1.4.1.393.100.9.3.0.2			PCA File Transfer ended
NTF pcaFileXferAbnormalEnd	1.3.6.1.4.1.393.100.9.3.0.3			PCA File Transfer ended abnormally
NTF pcaFileXferOperationCancelled	1.3.6.1.4.1.393.100.9.3.0.4			PCA File Transfer operation cancelled
NTF pcaFileXferOperation	1.3.6.1.4.1.393.100.9.3.0.5			PCA File Transfer detailed operation notice
NTF pcaFileXferVirusFound	1.3.6.1.4.1.393.100.9.3.0.6			PCA File Transfer has detected a virus.
pcaGateway	1.3.6.1.4.1.393.100.9.4
pcaMonitor	1.3.6.1.4.1.393.100.9.5
NTF pcaMonitorFullProductNotInstalled	1.3.6.1.4.1.393.100.9.5.0.1			PCA Monitor - The PCA Full product is not installed
NTF pcaMonitorHostNotInstalled	1.3.6.1.4.1.393.100.9.5.0.2			PCA Monitor - The PCA Host is not installed
NTF pcaMonitorRemoteNotInstalled	1.3.6.1.4.1.393.100.9.5.0.3			PCA Monitor - The PCA Remote is not installed
NTF pcaMonitorHostNotWaiting	1.3.6.1.4.1.393.100.9.5.0.4			PCA Monitor - The PCA Host is not waiting for a connection
NTF pcaMonitorHostNotAutoStart	1.3.6.1.4.1.393.100.9.5.0.5			PCA Monitor - The PCA Host is not set to auto start
NTF pcaMonitorHostNotWaitingOnDialup	1.3.6.1.4.1.393.100.9.5.0.6			PCA Monitor - The PCA Host is not waiting on a dialup
NTF pcaMonitorHostLanOnlyNotInstalled	1.3.6.1.4.1.393.100.9.5.0.7			PCA Monitor - The PCA Host LAN only is not installed
NTF pcaMonitorLiveUpdateNotRun	1.3.6.1.4.1.393.100.9.5.0.8			PCA Monitor - Live Update was not run on this host
pcaInstall	1.3.6.1.4.1.393.100.9.6
NTF pcaInstallRebootRequired	1.3.6.1.4.1.393.100.9.6.0.1			PCA Install - A reboot is required
pcaReset	1.3.6.1.4.1.393.100.9.7
NTF pcaResetNotInstalledReset	1.3.6.1.4.1.393.100.9.7.0.1			PCA Monitor - Reset install traps
NTF pcaResetHostNotWaitingReset	1.3.6.1.4.1.393.100.9.7.0.2			PCA Monitor - Reset Host not waiting traps
NTF pcaResetHostNotAutoStartReset	1.3.6.1.4.1.393.100.9.7.0.3			PCA Monitor - Reset Host not auto start traps
NTF pcaResetHostWaitingOnDialupReset	1.3.6.1.4.1.393.100.9.7.0.4			PCA Monitor - Reset Host waiting on dialup traps
NTF pcaResetLiveUpdateNotRunReset	1.3.6.1.4.1.393.100.9.7.0.5			PCA Monitor - Reset Live Update not run traps
pcaLDAP	1.3.6.1.4.1.393.100.9.8
pcaObject	1.3.6.1.4.1.393.100.9.9
STR hostComputerName	1.3.6.1.4.1.393.100.9.9.1	DisplayString	read-only	The computer that is running the PCA Host
STR remoteComputerName	1.3.6.1.4.1.393.100.9.9.2	DisplayString	read-only	The computer that is running the PCA Remote
STR callerName	1.3.6.1.4.1.393.100.9.9.3	DisplayString	read-only	The name of the remote caller.
STR hostConnectionObject	1.3.6.1.4.1.393.100.9.9.4	DisplayString	read-only	The name of the connection object used to start the PCA Host
STR remoteConnectionObject	1.3.6.1.4.1.393.100.9.9.5	DisplayString	read-only	The name of the connection object used to start the PCA Remote
INT xferFiles	1.3.6.1.4.1.393.100.9.9.6	INTEGER	read-only	Number of files transferred by file transfer
INT xferBytes	1.3.6.1.4.1.393.100.9.9.7	INTEGER	read-only	Number of bytes transferred by this file transfer operation
INT xferOperation	1.3.6.1.4.1.393.100.9.9.8	INTEGER	read-only	The operation last performed by file transfer
INT xferVirusFlag	1.3.6.1.4.1.393.100.9.9.9	INTEGER	read-only	This is the file transfer virus flag.
STR xferSourceFile	1.3.6.1.4.1.393.100.9.9.10	DisplayString	read-only	The name of the source file in a file transfer operation
STR xferDestFile	1.3.6.1.4.1.393.100.9.9.11	DisplayString	read-only	The name of the destination file in a file transfer operation
INT hostEncryptionLevel	1.3.6.1.4.1.393.100.9.9.12	INTEGER	read-only	The desired encryption level of the PCA Host
INT remoteEncryptionLevel	1.3.6.1.4.1.393.100.9.9.13	INTEGER	read-only	The desired encryption level of the PCA Remote
INT hostEndedReason	1.3.6.1.4.1.393.100.9.9.14	INTEGER	read-only	The reason a PCA Host was terminated
INT deviceType	1.3.6.1.4.1.393.100.9.9.15	INTEGER	read-only	This represents the type of device in which a connection was made.
INT xFerFailedFlag	1.3.6.1.4.1.393.100.9.9.16	INTEGER	read-only	This flag will be set if a file transfer event had failed.
STR encryptionErrorMessage	1.3.6.1.4.1.393.100.9.9.17	DisplayString	read-only	Encryption error message
STR p3SerialNumber	1.3.6.1.4.1.393.100.9.9.18	DisplayString	read-only	Processor serial number
STR systemName	1.3.6.1.4.1.393.100.9.9.19	DisplayString	read-only	Name of the system generating the event.

RFC description

PCA Alert MIB; defines alert and notification objects for PCA (Protected Computing Architecture) systems and related security appliances.

Start monitoring Windows PC running Symantec pcAnywhere host/remote software (session/file-transfer monitoring) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download PCA-Alert-MIB

What Is PCA-Alert-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description