WATCHGUARD-HA-MIB

All MIBs › WATCHGUARD-HA-MIB

Organization: WatchGuard Technologies, Inc.

Last Updated: 2007-01-25

Category: WatchGuard Security Appliances

Description: Manages WatchGuard high-availability cluster state, failover events, and synchronization status between nodes.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is WATCHGUARD-HA-MIB?

WATCHGUARD-HA-MIB is a WatchGuard enterprise MIB covering the high-availability (HA) clustering feature of WatchGuard Firebox/XTM security appliances, tracking cluster state, failover events, and synchronization status between paired nodes. It is one part of a broader WatchGuard MIB suite that the module description explicitly says works alongside wgInfoSystemMIB, wgClientMIB, wgSystemStatisticsMIB, and wgIpsecTunnelMIB. Its monitoring focus is on software/service status: which node is currently active versus standby, whether configuration and session state are synchronized between the pair, and whether a failover event has occurred -- critical for firewall/VPN availability. Its explicit dependency on sibling WatchGuard MIBs (system info, statistics, IPsec tunnels) means HA status is best interpreted together with those modules for full device health context. It is deployed on WatchGuard security appliances configured in active/passive or active/active HA pairs at network edges or data-center perimeters. Engineers can download the WATCHGUARD-HA-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in WATCHGUARD-HA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

WatchGuard Firebox/XTM security appliances in HA cluster pairs

Monitoring Examples

No sample objects were provided for this MIB; a realistic scenario would involve an admin polling the active/standby role and synchronization-status objects for each HA node to confirm both firewalls agree on which is active, and alerting when an unplanned role change or loss of sync between nodes is detected, which would indicate a failover event or split-brain condition.

What Can Be Monitored

HA node role (active/standby)
cluster synchronization status
failover event occurrence
peer node reachability

Imported Objects

From SNMPv2-SMI

Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
OBJECT-IDENTITY
OBJECT-TYPE
TimeTicks
Unsigned32
enterprises

From SNMPv2-TC

DateAndTime

From WATCHGUARD-MIB

watchguard

OBJECT-IDENTITY

How to Use in IPNetwork Monitor

Example using wgHAPeerSystemTotalSendBytes OID:

Select a WatchGuard Firebox/XTM security appliances in HA cluster pair (active/standby failover-sync status) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type wgHAPeerSystemTotalSendBytes into the Find box to locate it in the OID tree, then select it and click OK. The total number of bytes sent since peer system is up. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
wgInfoModule	1.3.6.1.4.1.3097.6			The MIB module describes general information of WatchGuard system. Mainly, the information obtained from this MIB is used by wgInfoSystemMIB, wgClientMIB, wgSystemStatisticsMIB, wgIpsecTunnelMIB, wgHAMIB.
wgHAMIB	1.3.6.1.4.1.3097.6.6			This is the base object identifier for all HA related branches.
wgHALocal	1.3.6.1.4.1.3097.6.6.1			This is the base object identifier for all objects which are belong to local appliance.
INT wgHAStatus	1.3.6.1.4.1.3097.6.6.1.1	INTEGER	read-only	Indicates current status of local appliance. disabled: The local appliance of HA system is not enabled. unknown: The local appliance of HA system is in initialization as-primary-active: The local appliance that is the primary appliance of HA/AS system is in active mode. This status is also called MASTER in some systems. as-secondary-active: The local appliance that is the secondary appliance of HA/AS system is in active mode. This status is also called BACKUP in some systems. aa-primary-ative: The local appliance that is the primary appliance of HA/AA system is in active mode. aa-secondary-active: The local appliance that is the secondary appliance of HA/AA system is in active mode. aa-primary-takeover: The local appliance that is the primary appliance of HA/AA system has taken over the peer's duty. aa-secondary-takeover: The local appliance of the secondary appliance of HA/AA system has taken over the peer's duty. standby: The local appliance of HA/AS system is in standby mode. admin: The local appliance of HA system detects an mismatched configuration and waits for system administrator to reslove the conflict. failed: The local appliance of the HA system is down due to forced failover or other reasons. unavailable: It's reported when local appliance of HA system is unabled to get status information.
INT wgHAPeerStatus	1.3.6.1.4.1.3097.6.6.1.2	INTEGER	read-only	Indicates current status of peer appliance. unavailable: It's reported when peer appliance of HA system is unabled to get status information. active: The peer applicance of HA system is in active mode. standby: The peer applicance of HA system is in standby mode. admin: The peer applicance of HA system dectects an mismatched configuration and waits for system administrator to reslove the conflict. failed: The peer appliance of HA system is down due to forced failover or other reasons.
DAT wgHALastDBSyncTime	1.3.6.1.4.1.3097.6.6.1.3	DateAndTime	read-only	The last DB synchronized time of local appliance.
INT wgHAError	1.3.6.1.4.1.3097.6.6.1.4	INTEGER	read-only	Reports the current error that occurred in local appliance .
INT wgHAPeerError	1.3.6.1.4.1.3097.6.6.1.5	INTEGER	read-only	Reports the current error that occurred in peer appliance.
wgHAPeer	1.3.6.1.4.1.3097.6.6.2			This is the base object identifier for all objects which are belong to peer appliance.
OCT wgHAPeerSerialNumber	1.3.6.1.4.1.3097.6.6.2.1	OCTET STRING	read-only	The serial number of peer appliance.
DAT wgHAPeerLastDBSyncTime	1.3.6.1.4.1.3097.6.6.2.2	DateAndTime	read-only	The last DB synchronized time of peer appliance.
wgHAPeerDevice	1.3.6.1.4.1.3097.6.6.2.3			This is the base object for parameters and configuration data of devices in this entity.
U32 wgHAPeerIfNumber	1.3.6.1.4.1.3097.6.6.2.3.1	Unsigned32	read-only	The number of RapidCard installed in this entity.
wgHAPeerIfTable	1.3.6.1.4.1.3097.6.6.2.3.2		not-accessible	A list of RapidCard entries. The number of entries is given by the value of wgHAPeerDeviceNumber.
wgHAPeerIfEntry	1.3.6.1.4.1.3097.6.6.2.3.2.1		not-accessible	A RapidCard entry containing objects for a particular RapidCard.
U32 wgHAPeerIfIndex	1.3.6.1.4.1.3097.6.6.2.3.2.1.1	Unsigned32	read-only	The unique value for each interface.
IP wgHAPeerIfIpAddr	1.3.6.1.4.1.3097.6.6.2.3.2.1.4	IpAddress	read-only	The ip address of the interface.
INT wgHAPeerIfLinkStatus	1.3.6.1.4.1.3097.6.6.2.3.2.1.9	INTEGER	read-only	The current state of the interface.
wgHAPeerCounters	1.3.6.1.4.1.3097.6.6.2.4			This is the base object for parameters and configuration data of devices in this entity.
G32 wgHAPeerSystemCpuUtil	1.3.6.1.4.1.3097.6.6.2.4.1	Gauge32	read-only	The CPU utilization of the peer system in last 5 seconds.
C64 wgHAPeerSystemTotalSendBytesEx	1.3.6.1.4.1.3097.6.6.2.4.2	Counter64	read-only	The total number of bytes sent since peer system is up.
C64 wgHAPeerSystemTotalRecvBytes	1.3.6.1.4.1.3097.6.6.2.4.3	Counter64	read-only	The total number of bytes received since peer system is up.
C64 wgHAPeerSystemTotalSendPackets	1.3.6.1.4.1.3097.6.6.2.4.4	Counter64	read-only	The total number of packets sent since peer system is up.
C64 wgHAPeerSystemTotalRecvPackets	1.3.6.1.4.1.3097.6.6.2.4.5	Counter64	read-only	The total number of packets received since peer system is up.
C64 wgHAPeerSystemStreamReqTotal	1.3.6.1.4.1.3097.6.6.2.4.6	Counter64	read-only	The total number of the connection requests since system is up.
C64 wgHAPeerSystemStreamReqDrop	1.3.6.1.4.1.3097.6.6.2.4.7	Counter64	read-only	The total number of the connection requests being dropped since system is up.
C64 wgHAPeerSystemCurrIpsecTunnels	1.3.6.1.4.1.3097.6.6.2.4.8	Counter64	read-only	The number of ipsec tunnels in the peer system currently.
G32 wgHAPeerSystemCpuUtil1	1.3.6.1.4.1.3097.6.6.2.4.9	Gauge32	read-only	The CPU utilization of the peer system in last 1 minute.
G32 wgHAPeerSystemCpuUtil5	1.3.6.1.4.1.3097.6.6.2.4.10	Gauge32	read-only	The CPU utilization of the peer system in last 5 minutes.
G32 wgHAPeerSystemCpuUtil15	1.3.6.1.4.1.3097.6.6.2.4.11	Gauge32	read-only	The CPU utilization of the peer system in last 15 minutes.

RFC description

Monitors WatchGuard high-availability system status, including primary/secondary appliance state and failover information.

Start monitoring WatchGuard Firebox/XTM security appliances in HA cluster pairs (active/standby failover-sync status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download WATCHGUARD-HA-MIB