TPT-NGFW-PERFORMANCE-MIB

All MIBs › TPT-NGFW-PERFORMANCE-MIB

Organization: Trend Micro, Inc.

Last Updated: 2016-05-25

Category: Firewall and Intrusion Prevention

Description: Monitors Trend Micro TippingPoint NGFW throughput, session rates, and performance counter statistics.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TPT-NGFW-PERFORMANCE-MIB?

TPT-NGFW-PERFORMANCE-MIB is a Trend Micro, Inc. proprietary MIB reporting firewall/IPS/SSL-inspection performance metrics for TippingPoint Next-Generation Firewall (NGFW) products. Its objects cover inbound/outbound packets/bytes/fragments, a packet-size-distribution table (size group, count), firewall block/permit/session counts, and IPS managed-streams/quarantine-count/rate-limit-count/AFC-entries/app-AFC-entries/blocked-streams/trusted-streams counters. As a performance MIB it lets an administrator watch firewall/IPS throughput and blocked-vs-permitted traffic ratios on a TippingPoint NGFW appliance. It is deployed on Trend Micro TippingPoint Next-Generation Firewall (NGFW) appliances. Engineers can download the TPT-NGFW-PERFORMANCE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in TPT-NGFW-PERFORMANCE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Trend Micro TippingPoint Next-Generation Firewall (NGFW) appliances

Monitoring Examples

An administrator monitors tptNgfwPerfFWBlocks against tptNgfwPerfFWPermits to gauge how much traffic a TippingPoint NGFW's firewall policy is blocking.

What Can Be Monitored

firewall/IPS throughput and block/permit ratios

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION

From TPT-NGFW-REG-MIB

tpt-ngfw-compls
tpt-ngfw-groups
tpt-ngfw-objs

How to Use in IPNetwork Monitor

Example using tptNgfwPerfPacketsIn OID:

Select a Trend Micro TippingPoint Next-Generation Firewall (NGFW) appliance (firewall/IPS throughput and block/permit counter status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type tptNgfwPerfPacketsIn into the Find box to locate it in the OID tree, then select it and click OK. It reports the total firewall ports packets received. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
tptNgfwPerformanceGroup	1.3.6.1.4.1.10734.3.9.1.1.6			Performance group for Next-generation Firewall products consisting firewall and IPS performance metrics.
tptNgfwPerformanceCompl	1.3.6.1.4.1.10734.3.9.1.2.3			Compliance for TippingPoint Next-generation Firewalls products.
tptNgfwPerformance	1.3.6.1.4.1.10734.3.9.2.3			Firewall, IPS, and SSL Inspection performance metrics for TippingPoint Next-Generation Firewall products. Copyright (C) 2016 Trend Micro Incorporated. All Rights Reserved. Trend Micro makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Trend Micro shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Trend Micro. The information is provided 'as is' without warranty of any kind and is subject to change without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial errors or omissions contained herein. TippingPoint(R), the TippingPoint logo, and Digital Vaccine(R) are registered trademarks of Trend Micro. All other company and product names may be trademarks of their respective holders. All rights reserved. This document contains confidential information, trade secrets or both, which are the property of Trend Micro. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from Trend Micro or one of its subsidiaries. All other company and product names may be trademarks of their respective holders.
tptNgfwPerformanceObjs	1.3.6.1.4.1.10734.3.9.2.3.1			Sub-tree of network traffic metrics for firewall ports.
C64 tptNgfwPerfPacketsInEx	1.3.6.1.4.1.10734.3.9.2.3.1.1	Counter64	read-only	Total firewall ports packets received.
C64 tptNgfwPerfPacketsOut	1.3.6.1.4.1.10734.3.9.2.3.1.2	Counter64	read-only	Total firewall ports packets transmitted.
C64 tptNgfwPerfBytesIn	1.3.6.1.4.1.10734.3.9.2.3.1.3	Counter64	read-only	Total firewall ports bytes received.
C64 tptNgfwPerfBytesOut	1.3.6.1.4.1.10734.3.9.2.3.1.4	Counter64	read-only	Total firewall ports bytes transmitted.
C64 tptNgfwPerfFragmentsIn	1.3.6.1.4.1.10734.3.9.2.3.1.5	Counter64	read-only	Total firewall ports fragments received.
C64 tptNgfwPerfFragmentsOut	1.3.6.1.4.1.10734.3.9.2.3.1.6	Counter64	read-only	Total firewall ports fragments transmitted.
tptNgfwPerfPacketDistTable	1.3.6.1.4.1.10734.3.9.2.3.1.7		not-accessible	Packet size distribution for firewall ports.
tptNgfwPerfPacketDistEntry	1.3.6.1.4.1.10734.3.9.2.3.1.7.1		not-accessible	An entry in the packet size distribution table. Rows cannot be created or deleted.
U32 tptNgfwPerfPacketDistEntryIndex	1.3.6.1.4.1.10734.3.9.2.3.1.7.1.1	Unsigned32	not-accessible	Index of the packet size distribution row. The first entry is 1.
TPT tptNgfwPerfPacketDistSizeGrp	1.3.6.1.4.1.10734.3.9.2.3.1.7.1.2	TptNgfwPerfPacketSizeGrouping	read-only	Packet size group.
C64 tptNgfwPerfPacketDistSizeGrpCount	1.3.6.1.4.1.10734.3.9.2.3.1.7.1.3	Counter64	read-only	Total count of packets for this size group.
tptNgfwPerfFWObjs	1.3.6.1.4.1.10734.3.9.2.3.2			Sub-tree of firewall performance metrics.
C64 tptNgfwPerfFWBlocks	1.3.6.1.4.1.10734.3.9.2.3.2.1	Counter64	read-only	Total count of sessions blocked by firewall rules.
C64 tptNgfwPerfFWPermits	1.3.6.1.4.1.10734.3.9.2.3.2.2	Counter64	read-only	Total count of sessions permitted by firewall rules.
C64 tptNgfwPerfFWSessions	1.3.6.1.4.1.10734.3.9.2.3.2.3	Counter64	read-only	Current active firewall session count.
tptNgfwPerfIPSObjs	1.3.6.1.4.1.10734.3.9.2.3.3			Sub-tree of IPS performance metrics.
C64 tptNgfwPerfIPSManagedStreams	1.3.6.1.4.1.10734.3.9.2.3.3.1	Counter64	read-only	Total count of IPS Managed streams. Includes Blocked, Quarantined, Rate Limited, and Trusted streams.
C64 tptNgfwPerfIPSQuarantineCount	1.3.6.1.4.1.10734.3.9.2.3.3.2	Counter64	read-only	Total count of IPS Quarantined streams.
C64 tptNgfwPerfIPSRateLimitCount	1.3.6.1.4.1.10734.3.9.2.3.3.3	Counter64	read-only	Total count of IPS Rate Limited streams.
C64 tptNgfwPerfIPSAfcEntries	1.3.6.1.4.1.10734.3.9.2.3.3.4	Counter64	read-only	Total count of IPS AFC (Adaptive Filter Control) entries.
C64 tptNgfwPerfIPSAfcAppEntries	1.3.6.1.4.1.10734.3.9.2.3.3.5	Counter64	read-only	Total count of IPS AFC (Adaptive Filter Control) Application entries.
C64 tptNgfwPerfIPSBlockedStreams	1.3.6.1.4.1.10734.3.9.2.3.3.6	Counter64	read-only	Total count of IPS Blocked streams.
C64 tptNgfwPerfIPSTrustedStreams	1.3.6.1.4.1.10734.3.9.2.3.3.7	Counter64	read-only	Total count of IPS Trusted streams.

RFC description

TippingPoint Next-Generation Firewall performance metrics for firewall, IPS, and SSL inspection monitoring.

Start monitoring Trend Micro TippingPoint Next-Generation Firewall (NGFW) appliances (firewall/IPS throughput and block/permit counter status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TPT-NGFW-PERFORMANCE-MIB