All MIBs › STORMSHIELD-IPSEC-STATS-MIB
Organization: Stormshield
Last Updated: 2017-02-20
Category: Firewall / Security Appliance, IPsec / VPN, Stormshield
Description: Monitors Stormshield IPsec VPN tunnel statistics including encrypted traffic volumes and SA counts.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is STORMSHIELD-IPSEC-STATS-MIB?
STORMSHIELD-IPSEC-STATS-MIB is a proprietary Stormshield MIB reporting runtime statistics for IPsec VPN tunnels on the vendor's firewall appliances, including encrypted/decrypted traffic volumes and active security association (SA) counts. It is purely a statistics/performance module, exposing traffic counters and tunnel/SA state rather than configuration. Its monitoring role is to reveal VPN performance and health: tracking encrypted traffic throughput and SA counts lets an operator confirm tunnels are passing expected traffic volumes and catch a tunnel that has dropped its SA, indicated by an SA count drop or traffic flatline. It depends conceptually on the IETF IPsec/IKE standards (RFC 4301 and related) that define the SAs being counted. Typical deployment is on Stormshield firewall/VPN gateway appliances terminating site-to-site or remote-access IPsec tunnels. Network engineers evaluating or troubleshooting this functionality can download the STORMSHIELD-IPSEC-STATS-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in STORMSHIELD-IPSEC-STATS-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Stormshield firewall/VPN gateway appliance
Monitoring Examples
No sample object or table names were provided for this module; based on the short description, a realistic use would be polling encrypted/decrypted traffic volume counters and active SA count per tunnel to confirm a site-to-site VPN is passing expected traffic, and to detect a tunnel outage evidenced by the SA count dropping to zero while traffic counters stop incrementing.
What Can Be Monitored
- encrypted traffic volume
- decrypted traffic volume
- active IPsec SA count
- per-tunnel statistics
Imported Objects
From RFC1213-MIB
| DisplayString |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE |
From SNMPv2-TC
| TruthValue |
From STORMSHIELD-SMI-MIB
| stormshieldMIB | OBJECT-IDENTITY |
OIDs
RFC description
Tracks IPSec security policy and security association statistics on Stormshield security appliances.
Start monitoring Stormshield firewall/VPN gateway appliance (IPsec tunnel/SA traffic statistics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.