TPT-NGFW-SYSTEM-INFO-MIB

All MIBs › TPT-NGFW-SYSTEM-INFO-MIB

Organization: Trend Micro, Inc.

Last Updated: 2016-05-25

Category: Firewall and Intrusion Prevention

Description: Provides Trend Micro TippingPoint NGFW system information including version, model, and uptime.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is TPT-NGFW-SYSTEM-INFO-MIB?

TPT-NGFW-SYSTEM-INFO-MIB is a Trend Micro TippingPoint proprietary MIB module supporting the Next-Generation Firewall (NGFW) product line, a security-focused enterprise networking technology area. It exposes system identity and version data, covering hardware serials and revisions, software/firmware build details, failsafe versions, and boot/runtime timing information. It is explicitly useful for monitoring hardware and software status of the appliance, reporting device uptime and boot time as well as tracking the exact software version, build type/revision, and Digital Vaccine (threat signature) version installed, which is critical for verifying patch and security-content currency. As a vendor-specific module it does not depend on other standard MIBs but is typically deployed alongside broader system and interface MIBs on the same device, and administrators mapping polled values back to the TPT-NGFW-SYSTEM-INFO-MIB OID tree can quickly identify which numeric identifier corresponds to each system attribute. It is typically deployed in enterprise or data center perimeter security environments where administrators track firmware compliance and appliance health across a fleet of NGFW appliances.

IPNetwork Monitor allows you to monitor SNMP objects defined in TPT-NGFW-SYSTEM-INFO-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Trend Micro TippingPoint NGFW product line, entire range (S/T-series and VTPS virtual models)

Monitoring Examples

An administrator would poll tptNgfwSystemUpTime and tptNgfwSystemBootTime to detect unexpected reboots, and tptNgfwSystemSoftwareVersion together with tptNgfwSystemDigitalVaccineVersion to confirm all NGFW units are running current firmware and threat signatures. tptNgfwSystemSerial and tptNgfwSystemHardwareSerial let an inventory system correlate SNMP data with asset records. A sudden change in tptNgfwSystemBuildRevision without a corresponding maintenance record could indicate an unauthorized firmware change.

What Can Be Monitored

system uptime
boot time
software version
hardware serial number
hardware revision
Digital Vaccine version

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DateAndTime
TEXTUAL-CONVENTION
TruthValue

From TPT-NGFW-REG-MIB

tpt-ngfw-compls
tpt-ngfw-eventsV2
tpt-ngfw-groups
tpt-ngfw-objs
tptNgfwNotifySeverity	OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using tptNgfwSystemUpTime OID:

Select a Trend Micro TippingPoint NGFW appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type tptNgfwSystemUpTime into the Find box to locate it in the OID tree, then select it and click OK. It reports how long the firewall system has been running since it was last powered on, in hundredths of a second. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a TimeTicks-type OID, Value bounds is the most useful condition here — trigger an alert if the value is unexpectedly low (e.g. under 10 minutes), since that indicates a recent, possibly unplanned, reboot. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
DAT tptNgfwSystemBootTime	1.3.6.1.4.1.10734.3.9.2.1.11	DateAndTime	read-only	The local date and time when the device was powered on.
DAT tptNgfwSystemBuildDate	1.3.6.1.4.1.10734.3.9.2.1.3	DateAndTime	read-only	The software build date & time.
STR tptNgfwSystemBuildRevision	1.3.6.1.4.1.10734.3.9.2.1.5	SnmpAdminString	read-only	The software build revision. This object reports the source code revision of the development build that's installed and running. This object is empty if a production build is installed.
BUI tptNgfwSystemBuildType	1.3.6.1.4.1.10734.3.9.2.1.4	BuildType	read-only	The software build type (production, or development). If a development build, the revision object is populated with the source code revision otherwise it's not provided.
STR tptNgfwSystemDigitalVaccineVersion	1.3.6.1.4.1.10734.3.9.2.1.6	SnmpAdminString	read-only	The installed Digital Vaccine version.
STR tptNgfwSystemFailsafeVersion	1.3.6.1.4.1.10734.3.9.2.1.10	SnmpAdminString	read-only	The fail-safe boot image version.
FIP tptNgfwSystemFipsAdminState	1.3.6.1.4.1.10734.3.9.2.1.16	FipsState	read-only	The administrative state of FIPS (140-2) encryption (disabled, crypto, or full)
FIP tptNgfwSystemFipsOperState	1.3.6.1.4.1.10734.3.9.2.1.17	FipsState	read-only	The operational state of FIPS (140-2) encryption (disabled, crypto, or full.)
STR tptNgfwSystemHardwareRevision	1.3.6.1.4.1.10734.3.9.2.1.9	SnmpAdminString	read-only	The hardware revision.
STR tptNgfwSystemHardwareSerial	1.3.6.1.4.1.10734.3.9.2.1.8	SnmpAdminString	read-only	The hardware serial number.
tptNgfwSystemInfo	1.3.6.1.4.1.10734.3.9.2.1			Hardware and system software version and runtime information for TippingPoint Next-Generation Firewall products. Copyright (C) 2016 Trend Micro Incorporated. All Rights Reserved. Trend Micro makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Trend Micro shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated into another language without the prior written consent of Trend Micro. The information is provided 'as is' without warranty of any kind and is subject to change without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial errors or omissions contained herein. TippingPoint(R), the TippingPoint logo, and Digital Vaccine(R) are registered trademarks of Trend Micro. All other company and product names may be trademarks of their respective holders. All rights reserved. This document contains confidential information, trade secrets or both, which are the property of Trend Micro. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from Trend Micro or one of its subsidiaries. All other company and product names may be trademarks of their respective holders.
tptNgfwSystemInfoCompl	1.3.6.1.4.1.10734.3.9.1.2.1			Compliance for TippingPoint Next-generation Firewall products.
tptNgfwSystemInfoGroup	1.3.6.1.4.1.10734.3.9.1.1.1			System group for Next-generation Firewall products consisting of hardware and software version information.
T/F tptNgfwSystemMasterKeySet	1.3.6.1.4.1.10734.3.9.2.1.18	TruthValue	read-only	Indicates if a master key (or password) has been set for the device. The value is true when a master key is set (configured), false otherwise.
STR tptNgfwSystemModel	1.3.6.1.4.1.10734.3.9.2.1.7	SnmpAdminString	read-only	The model number.
tptNgfwSystemNotificationGroup	1.3.6.1.4.1.10734.3.9.1.1.9			A group of notifications related to NGFW system status.
NTF tptNgfwSystemReadyNotify	1.3.6.1.4.1.10734.3.9.3.0.11			A notification that the system has achieved the system ready state.
STR tptNgfwSystemSerial	1.3.6.1.4.1.10734.3.9.2.1.1	SnmpAdminString	read-only	The installed software serial number.
NTF tptNgfwSystemShutdownNotify	1.3.6.1.4.1.10734.3.9.3.0.12			A notification that the system is performing a controlled shutdown or reboot.
IP tptNgfwSystemSmsIpAddress	1.3.6.1.4.1.10734.3.9.2.1.15	InetAddress	read-only	The SMS IP address that is managing this device. Only set if SMS is managing the device.
IPt tptNgfwSystemSmsIpAddressType	1.3.6.1.4.1.10734.3.9.2.1.14	InetAddressType	read-only	The SMS IP address type.
T/F tptNgfwSystemSmsManaged	1.3.6.1.4.1.10734.3.9.2.1.13	TruthValue	read-only	Indicates if this device is under SMS management control. This object is set to true when the device is under SMS control, false otherwise.
NTF tptNgfwSystemSmsNotAuthNotify	1.3.6.1.4.1.10734.3.9.3.0.13			A notification that a management station was denied control of the system because it did not have an authorized IP address. Notification includes the IP address of the management station that attempted control.
STR tptNgfwSystemSoftwareVersion	1.3.6.1.4.1.10734.3.9.2.1.2	SnmpAdminString	read-only	The installed software version.
TIK tptNgfwSystemUpTimeEx	1.3.6.1.4.1.10734.3.9.2.1.12	TimeTicks	read-only	The time (in 100th/second) since the system was powered on.

FAQ

What is TPT-NGFW-SYSTEM-INFO-MIB used for when monitoring TippingPoint NGFW appliances?
It exposes system identity and version data for Trend Micro TippingPoint Next-Generation Firewall appliances -- hardware serials and revisions, software/firmware build details, failsafe versions, and boot/runtime timing -- so administrators can verify device uptime, boot time, and exactly which firmware and Digital Vaccine (threat signature) version is running.

How would a security team use this MIB to confirm threat-signature currency across a fleet of firewalls?
By polling the Digital Vaccine version object alongside the software version/build/revision fields, a fleet-wide dashboard can flag any TippingPoint appliance running an outdated signature set or firmware build, which is critical for verifying patch and security-content compliance across perimeter security devices.

RFC description

Threat Prevention Toolkit Next-Generation Firewall vendor-private MIB for monitoring system information, status, and health metrics.

Start monitoring Trend Micro TippingPoint NGFW product line, entire range (S/T-series and VTPS virtual models) (hardware/firmware version and uptime status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download TPT-NGFW-SYSTEM-INFO-MIB