TOS-IDS

MIB Reference — IPNetwork Monitor · Updated October 06, 2026

All MIBs › TOS-IDS

Organization: TOPSEC

Last Updated: 1970--0-1-

Category: Firewall and Intrusion Prevention

Description: Manages TOPSEC firewall intrusion detection system rules, alert thresholds, and event reporting.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TOS-IDS?

TOS-IDS is a vendor proprietary SNMP module from TOPSEC (a Chinese network security vendor) for managing the intrusion detection system (IDS) capability on their firewall appliances. It is intended to expose IDS rule configuration, alert thresholds, and event/alert reporting data, structured around a conceptual IDS table as referenced in its module description. Its monitoring emphasis, where implemented, is on security event/fault status: tracking triggered IDS alerts and threshold breaches to flag active intrusion attempts or anomalous traffic patterns detected by the firewall, rather than general hardware health. It likely depends on the broader TOPSEC firewall MIB family for base system and interface identification alongside the IDS-specific objects. It is deployed on TOPSEC firewall/UTM appliances in network perimeter security deployments where IDS alerting needs to be integrated into a centralized SNMP-based monitoring system. Network engineers evaluating or troubleshooting this functionality can download the TOS-IDS file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TOS-IDS. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • TOPSEC firewall/UTM appliance

Monitoring Examples

No concrete object or table names were available in the source for this module beyond the general IDS table description, so a specific polling scenario cannot be honestly constructed; in practice an administrator would be expected to poll the IDS alert/event table entries and per-rule threshold objects to detect triggered intrusion alerts, but the exact object names are not available here.

This MIB depends on

Related MIBs

Imported Objects

From SNMPv2-SMI

Counter32
Gauge
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Opaque

From SNMPv2-TC

DateAndTime
DisplayString
TEXTUAL-CONVENTION

From TOS-SMI

tosMibOBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using idsTotal OID:

Select a TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type idsTotal into the Find box to locate it in the OID tree, then select it and click OK. It reports attack totals. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Topsec Intrusion Detection System (IDS) attack monitoring and statistics for security appliances.

Start monitoring TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TOS-IDS