PHION-MIB

All MIBs › PHION-MIB

Organization: Barracuda Networks

Last Updated: 2014-01-08

Category: Firewall, Security

Description: Monitors Barracuda Networks (formerly phion) NG Firewall policy rule statistics, VPN tunnel state, and threat detection counters.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is PHION-MIB?

PHION-MIB is a Barracuda Networks proprietary MIB (enterprise OID 10704, phion netfence/Barracuda NG Firewall heritage) reporting service, hotfix, hardware-sensor, RAID, and VPN status on Barracuda NG Firewall appliances. Its objects cover per-box and per-server service state tables, the installed phion release and applied hotfixes (name, install time), a hardware-sensor table (name, type, value), a RAID-event table (severity, time, text), and VPN-tunnel status. As a hardware/software-status MIB it lets an administrator confirm which services are running, which hotfixes are applied, and watch RAID events and VPN tunnel status. It is deployed on Barracuda NG Firewall appliances. Engineers can download the PHION-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in PHION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Barracuda NG Firewall appliances

Monitoring Examples

An administrator checks boxServiceState across critical services and reviews raidEvents to confirm overall appliance health on a Barracuda NG Firewall.

What Can Be Monitored

service state
applied hotfixes
RAID events
VPN tunnel status

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
enterprises

From SNMPv2-TC

DateAndTime
DisplayString
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using rate OID:

Select a Barracuda NG Firewall appliance (services/hotfix/RAID/VPN status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rate into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports the rate in kbit/sec. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
phion	1.3.6.1.4.1.10704			.
firewall	1.3.6.1.4.1.10704.1
boxServices	1.3.6.1.4.1.10704.1.0		not-accessible
boxServicesEntry	1.3.6.1.4.1.10704.1.0.1		not-accessible
STR boxServiceName	1.3.6.1.4.1.10704.1.0.1.1	DisplayString	read-only
SER boxServiceState	1.3.6.1.4.1.10704.1.0.1.2	ServiceState	read-only
serverServices	1.3.6.1.4.1.10704.1.1		not-accessible
serverServicesEntry	1.3.6.1.4.1.10704.1.1.1		not-accessible
STR serverServiceName	1.3.6.1.4.1.10704.1.1.1.1	DisplayString	read-only
SER serverServiceState	1.3.6.1.4.1.10704.1.1.1.2	ServiceState	read-only
STR phionRelease	1.3.6.1.4.1.10704.1.2	DisplayString	read-only
phionHotfixes	1.3.6.1.4.1.10704.1.3		not-accessible
phionHotfixesEntry	1.3.6.1.4.1.10704.1.3.1		not-accessible
STR hotfixName	1.3.6.1.4.1.10704.1.3.1.1	DisplayString	read-only
DAT hotfixInstallTime	1.3.6.1.4.1.10704.1.3.1.2	DateAndTime	read-only
hwSensors	1.3.6.1.4.1.10704.1.4		not-accessible
hwSensorsEntry	1.3.6.1.4.1.10704.1.4.1		not-accessible
STR hwSensorName	1.3.6.1.4.1.10704.1.4.1.1	DisplayString	read-only
SEN hwSensorType	1.3.6.1.4.1.10704.1.4.1.2	SensorType	read-only
I32 hwSensorValue	1.3.6.1.4.1.10704.1.4.1.3	Integer32	read-only
raidEvents	1.3.6.1.4.1.10704.1.5		not-accessible
raidEventsEntry	1.3.6.1.4.1.10704.1.5.1		not-accessible
I32 raidEventIndex	1.3.6.1.4.1.10704.1.5.1.1	Integer32	read-only
RAI raidEventSev	1.3.6.1.4.1.10704.1.5.1.2	RaidEventSeverity	read-only
DAT raidEventTime	1.3.6.1.4.1.10704.1.5.1.3	DateAndTime	read-only
STR raidEventText	1.3.6.1.4.1.10704.1.5.1.4	DisplayString	read-only
vpnTunnels	1.3.6.1.4.1.10704.1.6		not-accessible
vpnTunnelsEntry	1.3.6.1.4.1.10704.1.6.1		not-accessible
STR vpnName	1.3.6.1.4.1.10704.1.6.1.1	DisplayString	read-only
VPN vpnState	1.3.6.1.4.1.10704.1.6.1.2	VpnStates	read-only
bgpNeighbors	1.3.6.1.4.1.10704.1.7		not-accessible
bgpNeighborsEntry	1.3.6.1.4.1.10704.1.7.1		not-accessible
STR bgpNeighborAddress	1.3.6.1.4.1.10704.1.7.1.1	DisplayString	read-only
I32 bgpNeighborState	1.3.6.1.4.1.10704.1.7.1.2	Integer32	read-only
ospfNeighbors	1.3.6.1.4.1.10704.1.8		not-accessible
ospfNeighborsEntry	1.3.6.1.4.1.10704.1.8.1		not-accessible
STR ospfNeighborId	1.3.6.1.4.1.10704.1.8.1.1	DisplayString	read-only
STR ospfNeighborAddress	1.3.6.1.4.1.10704.1.8.1.2	DisplayString	read-only
STR ospfNeighborInterface	1.3.6.1.4.1.10704.1.8.1.3	DisplayString	read-only
STR ospfNeighborStatus	1.3.6.1.4.1.10704.1.8.1.4	DisplayString	read-only
ripNeighbors	1.3.6.1.4.1.10704.1.9		not-accessible
ripNeighborsEntry	1.3.6.1.4.1.10704.1.9.1		not-accessible
STR ripNeighborAddress	1.3.6.1.4.1.10704.1.9.1.1	DisplayString	read-only
STR ripNeighborState	1.3.6.1.4.1.10704.1.9.1.2	DisplayString	read-only
fwStats	1.3.6.1.4.1.10704.1.10		not-accessible
fwStatsEntry	1.3.6.1.4.1.10704.1.10.1		not-accessible
I32 firewallSessions	1.3.6.1.4.1.10704.1.10.1.1	Integer32	read-only
I32 packetThroughput	1.3.6.1.4.1.10704.1.10.1.2	Integer32	read-only
I32 dataThroughput	1.3.6.1.4.1.10704.1.10.1.3	Integer32	read-only
I32 vpnUsers	1.3.6.1.4.1.10704.1.11	Integer32	read-only
trafficShape	1.3.6.1.4.1.10704.1.12		not-accessible
trafficShapeEntry	1.3.6.1.4.1.10704.1.12.1		not-accessible
STR connectorName	1.3.6.1.4.1.10704.1.12.1.1	DisplayString	read-only	Name of shaping connector. With :IN for inbound and :OUT for outbound
C64 rateEx	1.3.6.1.4.1.10704.1.12.1.2	Counter64	read-only	Rate in kbit/sec
C64 sessions	1.3.6.1.4.1.10704.1.12.1.3	Counter64	read-only	Number of sessions
C64 class1Total	1.3.6.1.4.1.10704.1.12.1.4	Counter64	read-only	Total bytes for class1
C64 class1Pakets	1.3.6.1.4.1.10704.1.12.1.5	Counter64	read-only	Total packets for class1
C64 class1Drop	1.3.6.1.4.1.10704.1.12.1.6	Counter64	read-only	Dropped packets for class1
C64 class2Total	1.3.6.1.4.1.10704.1.12.1.7	Counter64	read-only	Total bytes for class2
C64 class2Pakets	1.3.6.1.4.1.10704.1.12.1.8	Counter64	read-only	Total packets for class2
C64 class2Drop	1.3.6.1.4.1.10704.1.12.1.9	Counter64	read-only	Dropped packets for class2
C64 class3Total	1.3.6.1.4.1.10704.1.12.1.10	Counter64	read-only	Total bytes for class3
C64 class3Pakets	1.3.6.1.4.1.10704.1.12.1.11	Counter64	read-only	Total packets for class3
C64 class3Drop	1.3.6.1.4.1.10704.1.12.1.12	Counter64	read-only	Dropped packets for class3
C64 noDelayTotal	1.3.6.1.4.1.10704.1.12.1.13	Counter64	read-only	Total bytes for no delay
C64 noDelayPakets	1.3.6.1.4.1.10704.1.12.1.14	Counter64	read-only	Total packets for no delay
C64 noDelayDrop	1.3.6.1.4.1.10704.1.12.1.15	Counter64	read-only	Dropped packets for no delay
event	1.3.6.1.4.1.10704.10
STR eventID	1.3.6.1.4.1.10704.10.1	DisplayString	read-only	Event ID
STR eventIDDescription	1.3.6.1.4.1.10704.10.2	DisplayString	read-only	Event Type-Description
STR eventType	1.3.6.1.4.1.10704.10.3	DisplayString	read-only	Event Type
STR eventAlarmTime	1.3.6.1.4.1.10704.10.4	DisplayString	read-only	Event Alarm Time
STR eventLayerDescription	1.3.6.1.4.1.10704.10.5	DisplayString	read-only	Event Layer Description
STR eventClassification	1.3.6.1.4.1.10704.10.6	DisplayString	read-only	Event Classification
STR eventRepresentation	1.3.6.1.4.1.10704.10.7	DisplayString	read-only	Event Representation
STR eventSeverity	1.3.6.1.4.1.10704.10.8	DisplayString	read-only	Event Severity
NTF eventTrap	1.3.6.1.4.1.10704.11			Trap
fwCompliances	1.3.6.1.4.1.10704.20
fwCompliance	1.3.6.1.4.1.10704.20.1			Firewall Info Groups
fwGroups	1.3.6.1.4.1.10704.21
serviceGroups	1.3.6.1.4.1.10704.21.1
boxGroup	1.3.6.1.4.1.10704.21.1.1
serverGroup	1.3.6.1.4.1.10704.21.1.2
firmwareGroups	1.3.6.1.4.1.10704.21.2
releaseGroup	1.3.6.1.4.1.10704.21.2.1
hotfixGroup	1.3.6.1.4.1.10704.21.2.2
hwGroups	1.3.6.1.4.1.10704.21.3
hwGroup	1.3.6.1.4.1.10704.21.3.1
raidGroup	1.3.6.1.4.1.10704.21.3.2
fwstatsGroup	1.3.6.1.4.1.10704.21.3.3
trafficshapeGroup	1.3.6.1.4.1.10704.21.3.4
netGroups	1.3.6.1.4.1.10704.21.4
vpnGroup	1.3.6.1.4.1.10704.21.4.1
bgpGroup	1.3.6.1.4.1.10704.21.4.2
ospfGroup	1.3.6.1.4.1.10704.21.4.3
ripGroup	1.3.6.1.4.1.10704.21.4.4
vpnusersGroup	1.3.6.1.4.1.10704.21.4.5
eventGroups	1.3.6.1.4.1.10704.21.5
eventGroup	1.3.6.1.4.1.10704.21.5.1
notificationGroup	1.3.6.1.4.1.10704.21.5.2

RFC description

Vendor-private MIB for Phion network appliances; defines objects for managing network security and firewall functions.

Start monitoring Barracuda NG Firewall appliances (services/hotfix/RAID/VPN status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download PHION-MIB