TOS-SYSSTATE

All MIBs › TOS-SYSSTATE

Organization: TOPSEC

Last Updated: 1970--0-1-

Category: Firewall and Intrusion Prevention, Network Monitoring and Statistics

Description: Tracks operational state, process health, and high-availability status for TOPSEC firewall systems.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TOS-SYSSTATE?

TOS-SYSSTATE is a TOPSEC (a Chinese network security vendor) private MIB that tracks the overall running state of their firewall/UTM appliances, including process health and high-availability (HA) cluster status. Although the extracted sample provides no explicit object list, the module description centers on a "product running state table," indicating it exposes per-process or per-module operational status entries alongside system-level state such as active/standby HA role. Its purpose is squarely hardware/software status monitoring: confirming that critical firewall processes and services are alive and running, and that HA failover state is as expected, which is essential for security-appliance uptime assurance. As a security-appliance MIB it likely depends on or complements standard system MIBs (e.g. SNMPv2-MIB sysUpTime) for baseline uptime reporting. It is typically deployed on TOPSEC firewall/UTM appliances in enterprise or carrier network security deployments where HA pairs protect critical infrastructure. Engineers can download the TOS-SYSSTATE file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TOS-SYSSTATE. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

TOPSEC firewall/UTM security appliance

Monitoring Examples

Specific object/table names were not available in the provided sample, so a concrete polling example cannot be grounded in real identifiers; based on the module description, an operator would be expected to poll a running-state table to confirm all critical firewall processes are active and to check the HA role/status of the appliance, flagging a fault if a process has stopped or an HA failover has occurred.

What Can Be Monitored

process/service running status
high-availability (HA) role/state
overall system operational state

Imported Objects

From SNMPv2-SMI

Gauge
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Opaque

From SNMPv2-TC

DateAndTime
DisplayString
TEXTUAL-CONVENTION

From TOS-SMI

tosMib

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using adminOnline OID:

Select a TOPSEC firewall/UTM security appliance (process health/HA cluster status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type adminOnline into the Find box to locate it in the OID tree, then select it and click OK. It reports how many admin user loged on the system. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the value drifts significantly from its normal baseline, since an unexpected change often points to a real underlying issue. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
sysRunning	1.3.6.1.4.1.14331.5.5.1.4			the product running state table
STR systemDeviceName	1.3.6.1.4.1.14331.5.5.1.4.1	DisplayString	read-only	device name.
STR systemTime	1.3.6.1.4.1.14331.5.5.1.4.2	DisplayString	read-only	System time.
TIK systemUpTime	1.3.6.1.4.1.14331.5.5.1.4.3	TimeTicks	read-only	The time (in hundredths of a second) since the network management portion of the system was last re-initialized.
I32 adminOnlineEx	1.3.6.1.4.1.14331.5.5.1.4.4	Integer32	read-only	how many admin user loged on the system
I32 cpuLoad	1.3.6.1.4.1.14331.5.5.1.4.5	Integer32	read-only	CPU load value (percent*100).
I32 memoryLoad	1.3.6.1.4.1.14331.5.5.1.4.6	Integer32	read-only	Memory load value (percent*100).
I32 memoryFree	1.3.6.1.4.1.14331.5.5.1.4.7	Integer32	read-only	Memory free (byte).
I32 memoryTotal	1.3.6.1.4.1.14331.5.5.1.4.8	Integer32	read-only	Memory total (byte).
I32 currentConnections	1.3.6.1.4.1.14331.5.5.1.4.9	Integer32	read-only	current connections.
I32 cps	1.3.6.1.4.1.14331.5.5.1.4.10	Integer32	read-only	new connections per second.

RFC description

Monitors TOPSEC firewall system operational state, process health, and high-availability status.

Start monitoring TOPSEC firewall/UTM security appliance (process health/HA cluster status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TOS-SYSSTATE