All MIBs › STONESOFT-IPS-MIB
Organization: Forcepoint LLC
Last Updated: 2016-05-06
Category: Firewall / Security Appliance, IPsec / VPN, Security / Access Control
Description: Manages Forcepoint Stonesoft intrusion prevention system sensor configuration, detection policy, and event counters.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is STONESOFT-IPS-MIB?
STONESOFT-IPS-MIB is Forcepoint's MIB for the Stonesoft Next-Generation Firewall (NGFW) when operating in Intrusion Prevention System (IPS) mode, covering sensor configuration, active security/detection policy, and security event counters. It exposes ipsSoftwareVersion for tracking the running software build, ipsSecurityPolicy and ipsPolicyTime for identifying which detection policy is loaded and when it was applied, and separate ipsEvents/ipsEventsV2 branches for security-event/alert data. For software status monitoring specifically, ipsSoftwareVersion lets an administrator confirm which IPS engine version is deployed (important for tracking signature/engine updates), while ipsPolicyTime reveals whether the sensor's policy is current or stale relative to expected update schedules. As a security-appliance MIB it likely has conceptual overlap with generic IDS/IPS event-reporting concepts but is structured as a self-contained Forcepoint enterprise module with its own conformance groups (ipsConformance/ipsGroups/ipsCompliances). It is deployed on Stonesoft NGFW appliances configured in IPS mode at network chokepoints for intrusion detection/prevention. Engineers can download the STONESOFT-IPS-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in STONESOFT-IPS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Forcepoint Stonesoft NGFW appliances in IPS mode
Monitoring Examples
An administrator would poll ipsSoftwareVersion to confirm the sensor is running the expected IPS engine build after an update, and check ipsSecurityPolicy together with ipsPolicyTime to verify the currently loaded detection policy and when it was last applied, a stale ipsPolicyTime would reveal a sensor that missed a scheduled policy push. Monitoring ipsEvents/ipsEventsV2 lets the NMS pick up security alert counts or notifications as they occur, flagging a sudden spike in detected intrusion attempts.
What Can Be Monitored
- IPS software/engine version
- active security policy identity
- policy last-applied timestamp
- security event counts/notifications
Imported Objects
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE |
From SNMPv2-TC
| DisplayString | |
| TimeStamp |
From STONESOFT-SMI-MIB
| stonesoftIPS | OBJECT-IDENTITY |
| stonesoftModules | OBJECT-IDENTITY |
OIDs
RFC description
Provides management and notifications for Forcepoint Stonesoft next-generation firewall IPS mode.
Start monitoring Forcepoint Stonesoft NGFW in IPS mode (sensor/policy/event status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.