SONICWALL-SSL-TRAN-MIB

All MIBs › SONICWALL-SSL-TRAN-MIB

Organization: SonicWALL, Inc.

Last Updated: 2002-03-06

Category: Dell SonicWall Network Security

Description: Monitors Dell SonicWall SSL-VPN transaction statistics, session throughput, and connection performance.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is SONICWALL-SSL-TRAN-MIB?

SONICWALL-SSL-TRAN-MIB is a SonicWALL proprietary MIB (enterprise OID 8714) reporting SSL/TLS transaction statistics on SonicWALL SSL-VPN appliances. Its objects cover total RSA operations, connection acceptance/rejection counts (including rejections due to no resources), active client/server connection and open-socket counts, SSL negotiation accept/refuse counts, and a broad set of error counters (connection, block, negotiation, OpenSSL accept/connect/read/write, and pipe read/write errors). As a performance/status MIB it lets an administrator watch SSL negotiation failures and connection-rejection counts as signs of an SSL-VPN appliance approaching its connection capacity. It is deployed on SonicWALL SSL-VPN appliances. Engineers can download the SONICWALL-SSL-TRAN-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in SONICWALL-SSL-TRAN-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

SonicWALL SSL-VPN appliances

Monitoring Examples

An administrator monitors connRejNoRes and activeClientConns together to determine whether a SonicWALL SSL-VPN appliance is starting to reject connections because it has hit a resource limit.

What Can Be Monitored

SSL negotiation/connection counts and error rates

Imported Objects

From RFC-1212

OBJECT-TYPE

From RFC-1215

TRAP-TYPE

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
enterprises

OIDs

OID symbolic	OID numeric	Type	Access	Description
sonicWALL	1.3.6.1.4.1.8714
sonicSEC	1.3.6.1.4.1.8714.2
sonicSSL	1.3.6.1.4.1.8714.2.1
sonicSSLTran	1.3.6.1.4.1.8714.2.1.7			The MIB module for SonicWALL enterprise SSL Transaction parameters statistics, and configuration objects and traps.
sslTranStats	1.3.6.1.4.1.8714.2.1.7.2
I32 totalRSAOperations	1.3.6.1.4.1.8714.2.1.7.2.20	Integer32	read-only	The total number of RSA operations performed on the device.
I32 connRejNoRes	1.3.6.1.4.1.8714.2.1.7.2.21	Integer32	read-only	SSL connections rejected due to low resources - indicates that the limit to server connections for existing resources was reached resulting in the rejection of additional connections.
I32 activeConnBlock	1.3.6.1.4.1.8714.2.1.7.2.22	Integer32	read-only	Active SSL connection blocks - equivalent to number of active client SSL connections
I32 activeClientConns	1.3.6.1.4.1.8714.2.1.7.2.23	Integer32	read-only	Active client SSL connections.
I32 connAccepted	1.3.6.1.4.1.8714.2.1.7.2.24	Integer32	read-only	Total SSL connections accepted
I32 activeServerConns	1.3.6.1.4.1.8714.2.1.7.2.25	Integer32	read-only	Active backend webserver connections
I32 sslNegRefused	1.3.6.1.4.1.8714.2.1.7.2.31	Integer32	read-only	SSL Connection negotiations refused
I32 sslNegAccept	1.3.6.1.4.1.8714.2.1.7.2.32	Integer32	read-only	Number of successful SSL socket negotiations
I32 activeOpenSockets	1.3.6.1.4.1.8714.2.1.7.2.33	Integer32	read-only	Active SSL related open socket count. Includes client, server, and listening sockets.
sslTranErrs	1.3.6.1.4.1.8714.2.1.7.3
I32 connErrs	1.3.6.1.4.1.8714.2.1.7.3.26	Integer32	read-only	Connection failures to the remote server.
I32 connBlockErrs	1.3.6.1.4.1.8714.2.1.7.3.27	Integer32	read-only	SSL Connection Block errors
I32 sslNegErrs	1.3.6.1.4.1.8714.2.1.7.3.34	Integer32	read-only	SSL Connection Negotiation errors
I32 sslErrors	1.3.6.1.4.1.8714.2.1.7.3.35	Integer32	read-only	Total SSL errors
I32 openSSLAcceptErrs	1.3.6.1.4.1.8714.2.1.7.3.36	Integer32	read-only	Total SSL accept errors
I32 openSSLConnErrs	1.3.6.1.4.1.8714.2.1.7.3.37	Integer32	read-only	Total SSL connection errors
I32 totSocketErrs	1.3.6.1.4.1.8714.2.1.7.3.38	Integer32	read-only	Total SSL socket errors
I32 openSSLWriteErr	1.3.6.1.4.1.8714.2.1.7.3.41	Integer32	read-only	SSL client write errors
I32 sslPipeWriteErr	1.3.6.1.4.1.8714.2.1.7.3.42	Integer32	read-only	SSL client pipe write errors
I32 toServerWriteErr	1.3.6.1.4.1.8714.2.1.7.3.43	Integer32	read-only	Backend server write errors
I32 toServerPipeWriteErr	1.3.6.1.4.1.8714.2.1.7.3.44	Integer32	read-only	Backend server write pipe errors
I32 openSSLReadErr	1.3.6.1.4.1.8714.2.1.7.3.45	Integer32	read-only	SSL client read errors
I32 sslPipeReadErr	1.3.6.1.4.1.8714.2.1.7.3.46	Integer32	read-only	SSL client read pipe errors
I32 toServerReadErr	1.3.6.1.4.1.8714.2.1.7.3.47	Integer32	read-only	Backend server read errors
I32 toServerPipeReadErr	1.3.6.1.4.1.8714.2.1.7.3.48	Integer32	read-only	Backend server pipe read errors
sslTranEvents	1.3.6.1.4.1.8714.2.1.7.10
NTF sslTpsChangeHi	1.3.6.1.4.1.8714.2.1.7.10.0.4			The number of SSL negotiations per second has transitioned above the upper threshold limit.
NTF sslTpsChangeLo	1.3.6.1.4.1.8714.2.1.7.10.0.5			The number of SSL transactions per second has transitioned below the lower threshold limit.
NTF sslTotalConnectsChangeHi	1.3.6.1.4.1.8714.2.1.7.10.0.6			The number of SSL connections has transitioned above the upper threshold limit.
NTF sslTotalConnectsChangeLo	1.3.6.1.4.1.8714.2.1.7.10.0.7			The number of SSL connections has transitioned below the lower threshould limit.

RFC description

Reports SSL transaction statistics and configuration for SonicWALL security appliances including connection counts and encryption operations.

Start monitoring SonicWALL SSL-VPN appliances (SSL/TLS transaction/negotiation/error statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download SONICWALL-SSL-TRAN-MIB

What Is SONICWALL-SSL-TRAN-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description