STORMSHIELD-HA-MIB

All MIBs › STORMSHIELD-HA-MIB

Organization: Stormshield

Last Updated: 2017-02-20

Category: Firewall / Security Appliance, Stormshield

Description: Monitors Stormshield high-availability cluster state, member synchronization, and failover event history.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is STORMSHIELD-HA-MIB?

STORMSHIELD-HA-MIB is a vendor-specific MIB from Stormshield, a network security appliance vendor, for monitoring the high-availability (HA) clustering feature of their firewall/UTM appliances. It exposes HA cluster state, showing member synchronization status and a history of failover events between paired appliances. Its monitoring focus is squarely on software/system availability status — confirming which cluster member is active/passive, whether the two nodes are in sync, and whether/when a failover has occurred — which is critical to knowing whether the security appliance pair is providing the redundancy it's meant to. It is a self-contained enterprise MIB specific to Stormshield's HA implementation, with no indicated dependency on external standard MIBs. It is deployed wherever Stormshield firewalls are configured in an active-passive or active-active HA pair, so administrators can confirm cluster health and investigate unexpected failovers through STORMSHIELD-HA-MIB SNMP monitoring.

IPNetwork Monitor allows you to monitor SNMP objects defined in STORMSHIELD-HA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Stormshield firewall/UTM appliance (HA pair)

Monitoring Examples

No sample objects were provided for this module, so a concrete polling example using real object names cannot be given; based on the description an admin would poll cluster member state and synchronization status objects to confirm both HA nodes agree on who is active, and review failover event history after an unexpected switchover.

What Can Be Monitored

HA cluster member role/state
synchronization status between nodes
failover event history

Imported Objects

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

TruthValue

From STORMSHIELD-SMI-MIB

stormshieldMIB

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using snsNbNode OID:

Select a Stormshield firewall/UTM appliance, HA cluster pair (failover/sync status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type snsNbNode into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of firewalls in the HA cluster. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes from its expected baseline, since that would indicate the underlying set of items changed unexpectedly. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
snsHA	1.3.6.1.4.1.11256.1.11			stormshield HA cluster
I32 snsNbNodeEx	1.3.6.1.4.1.11256.1.11.1	Integer32	read-only	Number of firewalls in the HA cluster
I32 snsNbDeadNode	1.3.6.1.4.1.11256.1.11.2	Integer32	read-only	Number of firewalls registered in the HA cluster but not replying
I32 snsNbActiveNode	1.3.6.1.4.1.11256.1.11.3	Integer32	read-only	Number of active firewalls
I32 snsNbHALinks	1.3.6.1.4.1.11256.1.11.5	Integer32	read-only	Number of ethernet links used for HA communication
I32 snsNbFaultyHALinks	1.3.6.1.4.1.11256.1.11.6	Integer32	read-only	Number of faulty HA links
snsNodeTable	1.3.6.1.4.1.11256.1.11.7		not-accessible	Firewalls part of the HA cluster
snsNode	1.3.6.1.4.1.11256.1.11.7.1		not-accessible	HA node
I32 snsNodeIndex	1.3.6.1.4.1.11256.1.11.7.1.1	Integer32	not-accessible	Index of each line in table
STR snsFwSerial	1.3.6.1.4.1.11256.1.11.7.1.2	DisplayString	read-only	Firewall serial
T/F snsOnline	1.3.6.1.4.1.11256.1.11.7.1.3	TruthValue	read-only	Firewall is online
STR snsModel	1.3.6.1.4.1.11256.1.11.7.1.4	DisplayString	read-only	Firewall model
STR snsVersion	1.3.6.1.4.1.11256.1.11.7.1.5	DisplayString	read-only	Firewall firmware version
STR snsHALicence	1.3.6.1.4.1.11256.1.11.7.1.6	DisplayString	read-only	HA Licence
I32 snsHAQuality	1.3.6.1.4.1.11256.1.11.7.1.7	Integer32	read-only	HA Quality
I32 snsHAPriority	1.3.6.1.4.1.11256.1.11.7.1.8	Integer32	read-only	HA Priority
I32 snsHAStatusForced	1.3.6.1.4.1.11256.1.11.7.1.9	Integer32	read-only	HA status forced (-2 : Unknown forced status, -1 : No peer found, 0 : No forced status, 1 : Forced active, 2 : Forced passive)
T/F snsHAActive	1.3.6.1.4.1.11256.1.11.7.1.10	TruthValue	read-only	Is the firewall active ?
I32 snsUptime	1.3.6.1.4.1.11256.1.11.7.1.11	Integer32	read-only	Firewall uptime
I32 snsHASyncStatus	1.3.6.1.4.1.11256.1.11.8	Integer32	read-only	Firewall configuration synchronization status ? (1: Synced, 0: Not synced, -1: Unknown / Error)
STR snsHAFwAdminRevison	1.3.6.1.4.1.11256.1.11.9	DisplayString	read-only	Firewall Admin Revision
snsNodePowerSupplyTable	1.3.6.1.4.1.11256.1.11.10		not-accessible	Power supply status of Firewalls
snsNodePowerSupplyEntry	1.3.6.1.4.1.11256.1.11.10.1		not-accessible	Power supply information
I32 snsNodePowerSupplyIndex	1.3.6.1.4.1.11256.1.11.10.1.1	Integer32	not-accessible	Index of each line in table
T/F snsNodePowerSupplyPowered	1.3.6.1.4.1.11256.1.11.10.1.2	TruthValue	read-only	Power supply is powered by electricity ?
snsNodeDiskTable	1.3.6.1.4.1.11256.1.11.11		not-accessible	Disks status of Firewalls
snsNodeDiskEntry	1.3.6.1.4.1.11256.1.11.11.1		not-accessible	Disk information
I32 snsNodeDiskIndex	1.3.6.1.4.1.11256.1.11.11.1.1	Integer32	not-accessible	Index of each disk in table
STR snsNodeDiskName	1.3.6.1.4.1.11256.1.11.11.1.2	DisplayString	read-only	Mount point name
STR snsNodeDiskSmartResult	1.3.6.1.4.1.11256.1.11.11.1.3	DisplayString	read-only	Result of the smart infos tests
I32 snsNodeDiskIsRaid	1.3.6.1.4.1.11256.1.11.11.1.4	Integer32	read-only	Is the disk a member of a RAID array
STR snsNodeDiskRaidStatus	1.3.6.1.4.1.11256.1.11.11.1.5	DisplayString	read-only	RAID Status
STR snsNodeDiskPosition	1.3.6.1.4.1.11256.1.11.11.1.6	DisplayString	read-only	Disk Position
snsNodeCpuTable	1.3.6.1.4.1.11256.1.11.12		not-accessible	Cpus status of Firewalls
snsNodeCpuEntry	1.3.6.1.4.1.11256.1.11.12.1		not-accessible	CPU information
I32 snsNodeCpuIndex	1.3.6.1.4.1.11256.1.11.12.1.1	Integer32	not-accessible	Index of each cpu in table
I32 snsNodeCpuTemp	1.3.6.1.4.1.11256.1.11.12.1.2	Integer32	read-only	Temperature in Celsius degree

RFC description

Vendor-private MIB for Stormshield firewall high-availability cluster management and monitoring.

Start monitoring Stormshield firewall/UTM appliance, HA cluster pair (failover/sync status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download STORMSHIELD-HA-MIB