VIPTELA-POLICY :: zoneBasedFirewallStatisticsTcpDropInvalidAckFlag

MIB Reference — IPNetwork Monitor · Updated September 14, 2026

All MIBsVIPTELA-POLICYzoneBasedFirewallStatisticsTcpDropInvalidAckFlag

zoneBasedFirewallStatisticsTcpDropInvalidAckFlag

Module: VIPTELA-POLICY

OID (symbolic): VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckFlag

OID (numeric): 1.3.6.1.4.1.41916.8.7.2.24

Node type: OBJECT-TYPE

Type: Integer32

Access: read-only

What is zoneBasedFirewallStatisticsTcpDropInvalidAckFlag?

A running count of TCP segments dropped for having an invalid ACK flag setting for the connection's current state. Admins treat a rising counter as another TCP-state-validation drop reason worth correlating with the other tcp-drop-* counters.

Examples

Walk all instances (SNMPv2c):

snmpwalk -v2c -c public <target> 1.3.6.1.4.1.41916.8.7.2.24
snmpwalk -v2c -c public <target> VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckFlag

Get a specific instance (index 1):

snmpget -v2c -c public <target> 1.3.6.1.4.1.41916.8.7.2.24.1
snmpget -v2c -c public <target> VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckFlag.1

Start monitoring Viptela (Cisco SD-WAN) edge routers (policer/firewall-filter drop/permit counter status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the VIPTELA-POLICY::zoneBasedFirewallStatisticsTcpDropInvalidAckFlag OID value, configure state conditions and alerts, and monitor any Viptela (Cisco SD-WAN) edge routers (policer/firewall-filter drop/permit counter status) from a single console.

OID Breakdown

Upper-level ancestors (7 from the standard OID tree / other modules)
Numeric OIDNameModule
1isoLANART-AGENT
1.3orgAirPair-MIB
1.3.6dodAirPair-MIB
1.3.6.1internetAirPair-MIB
1.3.6.1.4privateAirPair-MIB
1.3.6.1.4.1enterprisesAirPair-MIB
1.3.6.1.4.1.41916viptelaVIPTELA-GLOBAL
Numeric OIDNameModule
1.3.6.1.4.1.41916.8viptela_policyVIPTELA-POLICY
1.3.6.1.4.1.41916.8.7zbfwVIPTELA-POLICY
1.3.6.1.4.1.41916.8.7.2zoneBasedFirewallStatisticsVIPTELA-POLICY
1.3.6.1.4.1.41916.8.7.2.24zoneBasedFirewallStatisticsTcpDropInvalidAckFlagVIPTELA-POLICY