All MIBs › STORMSHIELD-VPNSA-MIB
Organization: Stormshield
Last Updated: 2017-02-20
Category: Firewall / Security Appliance, IPsec / VPN, Stormshield
Description: Manages Stormshield VPN security association negotiation state, lifetime, and traffic accounting.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is STORMSHIELD-VPNSA-MIB?
STORMSHIELD-VPNSA-MIB is a proprietary module for Stormshield (an Airbus-owned French network-security vendor) network security appliances, covering IPsec VPN Security Association (SA) negotiation and lifecycle. It exposes data such as SA/tunnel state, negotiation phase, remaining lifetime, and per-tunnel traffic accounting rather than physical sensors. Its core monitoring value is software/protocol-state health: whether VPN tunnels are established, renegotiating, or have expired, and whether encrypted traffic is flowing as expected, which surfaces connectivity and security issues before they become outages. It conceptually parallels standard IPsec/IKE terminology though it is implemented as a Stormshield-proprietary extension rather than an IETF IPsec MIB. It is typically polled on Stormshield UTM/firewall appliances terminating site-to-site or remote-access VPNs at branch offices and data center edges. Network engineers evaluating or troubleshooting this functionality can download the STORMSHIELD-VPNSA-MIB file directly to load it into their MIB browser.
IPNetwork Monitor allows you to monitor SNMP objects defined in STORMSHIELD-VPNSA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- Stormshield UTM/firewall appliance
- IPsec VPN gateway
Monitoring Examples
No object names were sampled for this module, so specifics below are inferred from the short description rather than confirmed identifiers. A typical use is polling the per-tunnel security-association table for negotiation state and remaining lifetime seconds, alerting when an SA drops to an expired/failed state without a successful rekey. Rising or falling SA byte/packet counters over time can also reveal a tunnel that has silently stopped carrying traffic despite showing 'established' state.
What Can Be Monitored
- VPN SA negotiation state
- SA lifetime/expiration
- tunnel traffic byte/packet counters
- IKE phase status
Imported Objects
From RFC1213-MIB
| DisplayString |
From SNMPv2-SMI
| Counter64 | |
| Integer32 | |
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
From STORMSHIELD-SMI-MIB
| stormshieldMIB | OBJECT-IDENTITY |
OIDs
RFC description
Monitors Stormshield VPN Security Association parameters including encryption, authentication, and traffic statistics.
Start monitoring Stormshield UTM/firewall appliance, IPsec VPN gateway (SA negotiation/lifecycle status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.