MIBs Depot

CISCO-SSL-PROXY-MIB

Registered at
1.3.6.1.4.1.9.9.370
Last updated
2012-09-18 00:00
Organization
Cisco Systems, Inc.
Revisions
2012-09-18 00:00, 2009-09-22 00:00, 2003-10-27 00:00
Namespace
cisco
Source file
CISCO-SSL-PROXY-MIB
Digest
sha256:7c3d65e3c2199f8a8dd6cc4e9c8064735e4c95546517f80695ed5cd65d7d123c

Description

This MIB module is for managing a Secure Socket Layer (SSL) Proxy device which terminates and accelarates SSL and Transport Layer Security (TLS) transactions. The proxy device can act as a SSL server or a SSL client depending on the configuration and the application. In one application, the device acts as a proxy SSL server. It terminates SSL handshakes and TCP connections initiated by SSL clients. The device is configured with a key and a certificate bearing the identity of the SSL server. The device uses this identity to establish the SSL session on behalf of the server, offloading the key establishment and data encryption and decryption work. After the SSL session has been successfully established between the client and the proxy device, the device starts to receive and decrypt the encrypted data sent from the client and forward to the server. The device forwards the clear data to the server on a backend connection. Clear data sent from the server is encrypted by the proxy device before it is forwarded to the SSL client. Optionally, the proxy device is configured to reencrypt the decrypted data sent from the client to the server. The proxy device acts as a SSL client to initiate a SSL session to the server. The decrypted data is encrypted within this SSL session to be forwarded to the server. The encrypted data sent from the server to the device is decrypted and then reencrypted before it is forwarded to the client. In another application, the proxy device forwards data generated by one or more sources to the destination via a SSL session. The proxy device acts as a SSL client and intiates a SSL session to the next hop device. When data is received from the source, the proxy device forwards the data to the next hop using the SSL session. The next hop can continue to forward the data if it is not the destination. The proxy device supports a number of proxy services. Each proxy service defines the role of the proxy device, whether it acts as a SSL server or a SSL client. The rest of the configuration include cryptographic and protocol parameters. This MIB is used for monitoring the configuration, statuses and statistics of the proxy services and the protocols including TCP, SSL and TLS.

Contact

Cisco Systems Customer Service Postal: 170 W Tasman Drive San Jose, CA 95134 USA Tel: +1 800 553-NETS E-mail: cs-ssl@cisco.com

Imports

FromSymbols
CISCO-SMIciscoMgmt
CISCO-TCCiscoPort
INET-ADDRESS-MIBInetAddress, InetAddressType
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Gauge32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, RowStatus, TEXTUAL-CONVENTION, TimeStamp, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CISCO-SMI
CISCO-SSL-PROXY-MIB
CISCO-TC
INET-ADDRESS-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
cspMIBNotifications
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.0
cspMIBObjects
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1
cspGlobalConfig
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.1
cspGcVersion
OBJECT-TYPE
The version information of the SSL proxy device, for display only.
1.3.6.1.4.1.9.9.370.1.1.1SnmpAdminString (SIZE(1..255))read-onlycurrent
cspGcFIPSMode
OBJECT-TYPE
An indication of whether or not the proxy device is operating in FIPS (Federal Information Processing Standards) approved mode. If 'true', the proxy device is operating in FIPS mode. When the device operates in FIPS mode, only approved cryptographic algorithms and key strengths are enabled. Authentication and other security requirements of FIPS will also be enforced in this mode.
1.3.6.1.4.1.9.9.370.1.1.2TruthValueread-writecurrent
cspGcRSArc4128md5
OBJECT-TYPE
An indication of whether or not the proxy device supports the cipher suite RSA_WITH_RC4_128_MD5. If 'true', the cipher suite is supported.
1.3.6.1.4.1.9.9.370.1.1.3TruthValueread-onlycurrent
cspGcRSArc4128sha
OBJECT-TYPE
An indication of whether or not the proxy device supports the cipher suite RSA_WITH_RC4_128_SHA. If 'true', the cipher suite is supported.
1.3.6.1.4.1.9.9.370.1.1.4TruthValueread-onlycurrent
cspGcRSAdescbcsha
OBJECT-TYPE
An indication of whether or not the proxy device supports the cipher suite RSA_WITH_DES_CBC_SHA. If 'true', the cipher suite is supported.
1.3.6.1.4.1.9.9.370.1.1.5TruthValueread-onlycurrent
cspGcRSA3descbcsha
OBJECT-TYPE
An indication of whether or not the proxy device supports the cipher suite RSA_WITH_3DES_EDE_CBC_SHA. If 'true', the cipher suite is supported.
1.3.6.1.4.1.9.9.370.1.1.6TruthValueread-onlycurrent
cspGcNotifyProxyServOperStatus
OBJECT-TYPE
An indication of whether or not a cspServOperStatus notification should be issued when the operation status of proxy services changes. If such a notification is desired, it is the responsibility of the management entity to ensure that the SNMP administrative model is configured in such a way as to allow the notification to be delivered.
1.3.6.1.4.1.9.9.370.1.1.7TruthValueread-writecurrent
cspGcNotifyPSCertExpiring
OBJECT-TYPE
An indication of whether or not a cspServCertExpiring notification should be issued when a proxy service certificate will be expiring in the configured time interval cspGcPSCertExpireInterval. If such a notification is desired, it is the responsibility of the management entity to ensure that the SNMP administrative model is configured in such a way as to allow the notification to be delivered.
1.3.6.1.4.1.9.9.370.1.1.8TruthValueread-writecurrent
cspGcPSCertExpireInterval
OBJECT-TYPE
The proxy service certificate expiration time interval, used to determine when the cspServCertExpiring notification should be issued if cspGcNotifyPSCertExpiring is 'true'. If this time interval is 0, no proxy service certification expiration will be checked.
1.3.6.1.4.1.9.9.370.1.1.9Integer32 (0..720)read-writecurrent
cspPsConfig
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.2
cspPsTable
OBJECT-TYPE
A list of proxy service configuration entries.
1.3.6.1.4.1.9.9.370.1.2.1not-accessiblecurrent
cspPsEntry
OBJECT-TYPE
The proxy service configuration entry. Each entry indicates the name and the index of a proxy service, and a set of configuration parameters to be applied on this proxy service. A unique name can be assigned to each proxy service. Optionally, multiple proxy services can be grouped into a proxy list. All the services in a list have the same name, and each service is assigned a unique index within the list. Each proxy service has a virtual and a server address. This entry reports the address and port configuration, and the administrative and operational statuses of each proxy service. If a service is not operational, the reason for its being 'down' is also reported.
1.3.6.1.4.1.9.9.370.1.2.1.1not-accessiblecurrent
cspPsName
OBJECT-TYPE
The name of a proxy service. A unique name string can be assigned to one proxy service or a list of proxy services. When the name is assigned to a list of proxy services, each proxy service is identified by a unique index within the list.
1.3.6.1.4.1.9.9.370.1.2.1.1.1SnmpAdminString (SIZE(1..50))not-accessiblecurrent
cspPsListIndex
OBJECT-TYPE
The unique index of a proxy service within a list. If the cspPsName string is assigned to a list of proxy services, this index is used to identify a proxy service within the list. If the cspPsName string is unique per proxy service, this index is not used, and the value shall be 0.
1.3.6.1.4.1.9.9.370.1.2.1.1.2Integer32 (0..256)not-accessiblecurrent
cspPsServiceType
OBJECT-TYPE
The type of proxy service: 'server(1)' or 'client(2)'. When servicing a 'server' type proxy service, the proxy device acts as a SSL server. It terminates the SSL handshake initiated by a SSL client, and forwards the data sent from the client to the destination. When servicing a 'client' type proxy service, the proxy device acts as a SSL client. It initiates a SSL handshake to a SSL server, and forwards data sent from one or more data sources to the SSL server.
1.3.6.1.4.1.9.9.370.1.2.1.1.3INTEGER {server(1), client(2)}read-createcurrent
cspPsVirtualAddressType
OBJECT-TYPE
An indication of the type of address contained in cspPsVirtualAddress.
1.3.6.1.4.1.9.9.370.1.2.1.1.4InetAddressTyperead-createcurrent
cspPsVirtualAddress
OBJECT-TYPE
The virtual address. This address is used by the data source to send data that can be received by the proxy device and forwarded to the destination.
1.3.6.1.4.1.9.9.370.1.2.1.1.5InetAddressread-createcurrent
cspPsVirtualPort
OBJECT-TYPE
The virtual TCP port number. This port number is used by the data source to send data that can be received by the proxy device and forwarded to the destination.
1.3.6.1.4.1.9.9.370.1.2.1.1.6CiscoPortread-createcurrent
cspPsServerAddressType
OBJECT-TYPE
An indication of the type of address contained in cspPsServerAddress.
1.3.6.1.4.1.9.9.370.1.2.1.1.7InetAddressTyperead-createcurrent
cspPsServerAddress
OBJECT-TYPE
The server address. This address is used by the proxy device to send or forward data to the destination.
1.3.6.1.4.1.9.9.370.1.2.1.1.8InetAddressread-createcurrent
cspPsServerPort
OBJECT-TYPE
The server TCP port number. This port number is used by the proxy device to send or forward data to the destination.
1.3.6.1.4.1.9.9.370.1.2.1.1.9CiscoPortread-createcurrent
cspPsAdminStatus
OBJECT-TYPE
The administrative status of the proxy service. Each proxy service can be configured to be administratively 'up' or 'down'. If the Adminstrative Status is 'down', the service will not be operational.
1.3.6.1.4.1.9.9.370.1.2.1.1.10INTEGER {up(1), down(2)}read-createcurrent
cspPsOperStatus
OBJECT-TYPE
The operational status of a proxy service. For a proxy service to be operational, its administrative status needs to be 'up'. If the administrative status is 'up', the operational status will be changed from 'down' to 'up' automatically once all the required configuration parameters and resources, including necessary keys and certificates, become available. If one or more required resources are removed (e.g. the certificate has expired), the operational status will be changed to 'down' automatically.
1.3.6.1.4.1.9.9.370.1.2.1.1.11INTEGER {up(1), down(2)}read-onlycurrent
cspPsOperDownReason
OBJECT-TYPE
The reason for the operational status to be 'down'. Possible values are: other(1) : Unknown or undefined reason, notApplicable(2) : Administratively 'down', noConnectivity(3) : No Connectivity to the client, the server, or the gateway, noVirtualAddr(4) : Virtual Address not configured, noServerAddr(5) : Server Address not configured, noCert(6) : Certificate configured, but invalid or missing, certNotConfigured(7): Certificate not configured.
1.3.6.1.4.1.9.9.370.1.2.1.1.12INTEGER {other(1), notApplicable(2), noConnectivity(3), noVirtualAddr(4), noServerAddr(5), noCert(6), certNotConfigured(7)}read-onlycurrent
cspPsConfigRowStatus
OBJECT-TYPE
The conceptual row status of the proxy service configuration entry. An entry cannot have the status 'active' until values have been assigned to the following objects: cspPsVirtualAddress, cspPsVirtualPort, cspPsServerAddress and cspPsServerPort. This entry can be modified when the status is 'active'.
1.3.6.1.4.1.9.9.370.1.2.1.1.13RowStatusread-createcurrent
cspPsPolicyConfig
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.3
cspPsPolicyTable
OBJECT-TYPE
A list of proxy service policy configuration entries.
1.3.6.1.4.1.9.9.370.1.3.1not-accessiblecurrent
cspPsPolicyEntry
OBJECT-TYPE
The proxy service policy entry. Each proxy service policy entry contains the name of each type of policy configured for the proxy service. A policy is a set of configuration parameters and rules to observe for implementing a protocol or an operation. One or more of the following policies can be configured for a proxy service: TCP protocol policy for virtual connections, TCP protocol policy for server connections, SSL protocol policy, HTTP header insertion policy, and URL rewrite policy.
1.3.6.1.4.1.9.9.370.1.3.1.1not-accessiblecurrent
cspPspVirTcpPolicyName
OBJECT-TYPE
The name of the TCP protocol policy configured for the virtual side connections. If no TCP policy is configured, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.3.1.1.1SnmpAdminString (SIZE(0..255))read-createcurrent
cspPspSerTcpPolicyName
OBJECT-TYPE
The name of the TCP protocol policy configured for the server side connections. If no TCP policy is configured, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.3.1.1.2SnmpAdminString (SIZE(0..255))read-createcurrent
cspPspSslPolicyName
OBJECT-TYPE
The name of the SSL protocol policy configured for the SSL handshake and data encryption and decryption. If no SSL policy is configured, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.3.1.1.3SnmpAdminString (SIZE(0..255))read-createcurrent
cspPspHttpHdrPolicyName
OBJECT-TYPE
The name of the HTTP header insertion policy. A number of fields can be inserted into the HTTP headers when the proxy service is forwarding data. The policy specifies the header insertion parameters. If no policy is configured, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.3.1.1.4SnmpAdminString (SIZE(0..255))read-createcurrent
cspPspUrlRewritePolicyName
OBJECT-TYPE
The name of the URL rewrite policy. The policy specifies configuration parameters for rewriting URLs in HTTP headers and payload. If no policy is configured, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.3.1.1.5SnmpAdminString (SIZE(0..255))read-createcurrent
cspPsKeyCertConfig
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.4
cspPsKeyCertTable
OBJECT-TYPE
A list of proxy service key and certificate configuration entries.
1.3.6.1.4.1.9.9.370.1.4.1not-accessiblecurrent
cspPsKeyCertEntry
OBJECT-TYPE
The proxy service key and certificate configuration entry. This entry specifies the key usage, optionally the trust point name, the certificate and the key file names, the key size and time of generation or import, and some important attributes of the certificate.
1.3.6.1.4.1.9.9.370.1.4.1.1not-accessiblecurrent
cspPskcKeyUsage
OBJECT-TYPE
An indication of the usage of a key assigned to a proxy service. Each proxy service can be assigned one or more keys. The key can be used for signing only, for data encryption and decryption only, or for general purpose (that is, it can be used for both signing and data encryption and decryption). The following values are defined: rsaSigning(1) : RSA key used for signing only, rsaEncryption(2) : RSA key used for data encryption and decryption only, rsaGeneralPurpose(3): RSA key used for both signing and data encryption and decryption.
1.3.6.1.4.1.9.9.370.1.4.1.1.1INTEGER {rsaSigning(1), rsaEncryption(2), rsaGeneralPurpose(3)}not-accessiblecurrent
cspPskcTrustPointName
OBJECT-TYPE
The name of a trust point assigned to the proxy service. The trust point contains information that can be used for certificate enrollment or for importing keys and certificates. A trust point may also contain identifying information about keys and certificates, and the path and the protocol to be used for the proxy device to communicate with a Certificate Authority which issues certificates for the proxy service. If no trust point is assigned to the proxy service, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.2SnmpAdminString (SIZE(0..255))read-createcurrent
cspPskcCertFileName
OBJECT-TYPE
The name of the file storing the certificate. If there is no such file, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.3SnmpAdminString (SIZE(0..255))read-createcurrent
cspPskcKeyName
OBJECT-TYPE
The name of a key assigned to the proxy service. If there is no key assigned, the name will be a NULL string. If the key is stored in a file, the file name may be used to identify the key, and this name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.4SnmpAdminString (SIZE(0..255))read-createcurrent
cspPskcKeyFileName
OBJECT-TYPE
The name of the file storing the key. If there is no such file, the name will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.5SnmpAdminString (SIZE(0..255))read-createcurrent
cspPskcKeySize
OBJECT-TYPE
The size of the key. The following modulus sizes are defined for RSA keys: 512-bit, 768-bit, 1024-bit, 1536-bit and 2048-bit.
1.3.6.1.4.1.9.9.370.1.4.1.1.6INTEGER {other(1), rsa512(2), rsa768(3), rsa1024(4), rsa1536(5), rsa2048(6)}read-onlycurrent
cspPskcKeyTime
OBJECT-TYPE
The time of generation of the key, if known. If the key is imported to the proxy device, this time can indicate the time of import if the time of generation is unknown. If the time is not known, this will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.7SnmpAdminString (SIZE(0..32))read-onlycurrent
cspPskcCertStatus
OBJECT-TYPE
The status of the certificate that is used to publish the public key. The following values are defined: Valid(1) : Certificate is valid, Expired(2) : Certificate has expired, Rolling Over(3): Certificate is being renewed. Whether or not an expired certificate can be used for the proxy service is implementation specific.
1.3.6.1.4.1.9.9.370.1.4.1.1.8INTEGER {valid(1), expired(2), rollover(3)}read-onlycurrent
cspPskcCertSubjName
OBJECT-TYPE
The subject name of the certificate assigned to the proxy service. If there is no subject name on the certificate, this will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.9SnmpAdminString (SIZE(0..255))read-onlycurrent
cspPskcCertSerialNum
OBJECT-TYPE
The serial number of the certificate assigned to the proxy service. If there is no serial number on the certificate, this will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.10SnmpAdminString (SIZE(0..255))read-onlycurrent
cspPskcIssuerName
OBJECT-TYPE
The issuer name of the certificate assigned to the proxy service. If the issuer name of the certificate is not known, this will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.11SnmpAdminString (SIZE(0..255))read-onlycurrent
cspPskcIssuerCertSerialNum
OBJECT-TYPE
The serial number of the issuer's certificate. If the serial number of the issuer's certificate is not known, this will be a NULL string.
1.3.6.1.4.1.9.9.370.1.4.1.1.12SnmpAdminString (SIZE(0..255))read-onlycurrent
cspPskcCertStartDate
OBJECT-TYPE
The time when the certificate starts to be valid, corresponding to the notBefore time on the certificate.
1.3.6.1.4.1.9.9.370.1.4.1.1.13SnmpAdminString (SIZE(0..32))read-onlycurrent
cspPskcCertEndDate
OBJECT-TYPE
The time when the certificate validity ends, corresponding to the notAfter time on the certificate.
1.3.6.1.4.1.9.9.370.1.4.1.1.14SnmpAdminString (SIZE(0..32))read-onlycurrent
cspPskcConfigRowStatus
OBJECT-TYPE
The conceptual row status of the proxy service key and certificate configuration entry. This entry can be modified when the status is 'active'.
1.3.6.1.4.1.9.9.370.1.4.1.1.15RowStatusread-createcurrent
cspTcpPolicyConfig
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.5
cspTcpPolicyTable
OBJECT-TYPE
A list of TCP Policy entries
1.3.6.1.4.1.9.9.370.1.5.1not-accessiblecurrent
cspTcpPolicyEntry
OBJECT-TYPE
TCP Policy configuration entry. Each entry defines a set of TCP protocol parameters. A policy can be applied to one or more proxy services.
1.3.6.1.4.1.9.9.370.1.5.1.1not-accessiblecurrent
cspTpPolicyName
OBJECT-TYPE
The unique name of a TCP policy.
1.3.6.1.4.1.9.9.370.1.5.1.1.1SnmpAdminString (SIZE(1..255))not-accessiblecurrent
cspTpSynTimeOut
OBJECT-TYPE
The TCP connection SYN timeout value. This is the amount of time the SSL proxy waits before failing the connection establishment attempt.
1.3.6.1.4.1.9.9.370.1.5.1.1.2Integer32 (0..3600)read-createcurrent
cspTpInActivityTimeOut
OBJECT-TYPE
The TCP connection inactivity timeout value. This is the amount of time the SSL proxy waits for the next packet to arrive on a TCP connection, if no packet is received within this period then the connection is considered to be inactive and aborted.
1.3.6.1.4.1.9.9.370.1.5.1.1.3Integer32 (0..3600)read-createcurrent
cspTpNagleAlgo
OBJECT-TYPE
If 'true', the Nagle Algorithm is enabled during the SSL or TLS data phase to concatenate a number of small messages to avoid sending small messages into the network.
1.3.6.1.4.1.9.9.370.1.5.1.1.4TruthValueread-createcurrent
cspTpFinWaitTimeOut
OBJECT-TYPE
The TCP connection FIN-WAIT2 state timeout value. This is the amount of time the SSL proxy waits for a FIN from the peer after it has initiated close and is in FIN-WAIT2 state.
1.3.6.1.4.1.9.9.370.1.5.1.1.5Integer32 (0..3600)read-createcurrent
cspTpReassemTimeOut
OBJECT-TYPE
The TCP connection reassembly timeout value. This is the amount of time the SSL proxy waits during the TCP out of order traffic reassembly process for the next expected in sequence segment to arrive.
1.3.6.1.4.1.9.9.370.1.5.1.1.6Integer32 (0..3600)read-createcurrent
cspTpRcvBufShrLim
OBJECT-TYPE
The receive buffer share limit per connection. This is used by SSL proxy to calculate the maximum window to advertise during the 3 way handshake, and is also the maximum share of the receive buffer pool that would be allocated for this connection.
1.3.6.1.4.1.9.9.370.1.5.1.1.7Integer32 (8192..262144)read-createcurrent
cspTpTransBufShrLim
OBJECT-TYPE
The transmit buffer share limit per connection. This is the maximum share of the send buffer pool that would be allocated for this connection.
1.3.6.1.4.1.9.9.370.1.5.1.1.8Integer32 (8192..262144)read-createcurrent
cspTpMss
OBJECT-TYPE
The TCP maximum segment size. This is the MSS value offered by the SSL proxy during 3-way handshake
1.3.6.1.4.1.9.9.370.1.5.1.1.9Integer32 (256..1460)read-createcurrent
cspTpPathMtuDisc
OBJECT-TYPE
If 'true', the Path MTU Discovery algorithm is enabled.
1.3.6.1.4.1.9.9.370.1.5.1.1.10TruthValueread-createcurrent
cspTpConfigRowStatus
OBJECT-TYPE
The conceptual row status of the TCP policy configuration entry. This entry can be modified when the status is 'active'.
1.3.6.1.4.1.9.9.370.1.5.1.1.11RowStatusread-createcurrent
cspSslPolicyConfig
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.6
cspSslPolicyTable
OBJECT-TYPE
A list of SSL protocol policy configuration entries.
1.3.6.1.4.1.9.9.370.1.6.1not-accessiblecurrent
cspSslPolicyEntry
OBJECT-TYPE
A SSL policy defines a set of cipher suites to be supported, and the SSL or TLS protocol parameters. Each policy can be assigned to one or more proxy services. If no SSL policy is assigned to a proxy service, all supported cipher suites and all protocol versions will be enabled by default.
1.3.6.1.4.1.9.9.370.1.6.1.1not-accessiblecurrent
cspSpPolicyName
OBJECT-TYPE
The unique name of a SSL protocol policy.
1.3.6.1.4.1.9.9.370.1.6.1.1.1SnmpAdminString (SIZE(1..255))not-accessiblecurrent
cspSpRSArc4128md5
OBJECT-TYPE
An indication of whether or not the cipher suite RSA_WITH_RC4_128_MD5 is configured. If 'true', the cipher suite is configured.
1.3.6.1.4.1.9.9.370.1.6.1.1.2TruthValueread-createcurrent
cspSpRSArc4128sha
OBJECT-TYPE
An indication of whether or not the cipher suite RSA_WITH_RC4_128_SHA is configured. If 'true', the cipher suite is configured.
1.3.6.1.4.1.9.9.370.1.6.1.1.3TruthValueread-createcurrent
cspSpRSAdescbcsha
OBJECT-TYPE
An indication of whether or not the cipher suite RSA_WITH_DES_CBC_SHA is configured. If 'true', the cipher suite is configured.
1.3.6.1.4.1.9.9.370.1.6.1.1.4TruthValueread-createcurrent
cspSpRSA3descbcsha
OBJECT-TYPE
An indication of whether or not the cipher suite RSA_WITH_3DES_EDE_CBC_SHA is configured. If 'true', the cipher suite is configured.
1.3.6.1.4.1.9.9.370.1.6.1.1.5TruthValueread-createcurrent
cspSpProtocol
OBJECT-TYPE
The set of SSL and TLS protocols to be supported. The following values are defined: other(1) : An unspecified protocol, SSL 3.0(2) : Support SSL 3.0 protocol only, TLS 1.0(3) : Support TLS 1.0 protocol only, ssl3AndTls1(3) : Support both SSL 3.0 and TLS 1.0
1.3.6.1.4.1.9.9.370.1.6.1.1.6INTEGER {other(1), ssl3(2), tls1(3), ssl3AndTls1(4)}read-createcurrent
cspSpCloseProtocol
OBJECT-TYPE
An indication of whether or not the SSL close protocol is enforced. If 'true', the close protocol is enforced. A close-notify alert message is sent to the peer, and a close-notify alert message is expected from the peer. If 'false', the close protocol is not enforced. The proxy service sends a close-notify alert message to the peer; however, the proxy service does not expect a close-notify alert from the peer before tearing down the session.
1.3.6.1.4.1.9.9.370.1.6.1.1.7TruthValueread-createcurrent
cspSpSessionCache
OBJECT-TYPE
The SSL session cache size. The session cache is used to store a number of most recently used session identifiers. Session identifiers can be reused if a new connection requests to use a session identifier that is found in the cache. This object specifies the maximum size of the cache.
1.3.6.1.4.1.9.9.370.1.6.1.1.8Integer32 (1..262143)read-createcurrent
cspSpSessionTimeOut
OBJECT-TYPE
The SSL session timeout value. The session entry will be removed from the session cache after the configured timeout. Once the session entry is removed, subsequent connections cannot reuse the session. If this timeout value is 0, entries in the session cache will not timeout.
1.3.6.1.4.1.9.9.370.1.6.1.1.9Integer32 (0..72000)read-createcurrent
cspSpConfigRowStatus
OBJECT-TYPE
The row status of the SSL policy configuration entry. This entry can be modified when the status is 'active'.
1.3.6.1.4.1.9.9.370.1.6.1.1.10RowStatusread-createcurrent
cspTcpCountersInfo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.7
cspTcpCountersClearTime
OBJECT-TYPE
The last time when the TCP counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
1.3.6.1.4.1.9.9.370.1.7.1TimeStampread-onlycurrent
cspTcpCounters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.8
cspTcConnInit
OBJECT-TYPE
The total number of TCP connections initiated by the proxy device.
1.3.6.1.4.1.9.9.370.1.8.1Counter32read-onlycurrent
cspTcConnAccept
OBJECT-TYPE
The total number of TCP connections accepted by the proxy device.
1.3.6.1.4.1.9.9.370.1.8.2Counter32read-onlycurrent
cspTcConnEstab
OBJECT-TYPE
The total number of TCP connections established.
1.3.6.1.4.1.9.9.370.1.8.3Counter32read-onlycurrent
cspTcConnDrop
OBJECT-TYPE
The total number of TCP connections dropped.
1.3.6.1.4.1.9.9.370.1.8.4Counter32read-onlycurrent
cspTcConnClosed
OBJECT-TYPE
The total number of TCP connections closed.
1.3.6.1.4.1.9.9.370.1.8.5Counter32read-onlycurrent
cspTcSynTimeOuts
OBJECT-TYPE
The total number of SYN timeouts.
1.3.6.1.4.1.9.9.370.1.8.6Counter32read-onlycurrent
cspTcIdleTimeOuts
OBJECT-TYPE
The total number of idle timeouts.
1.3.6.1.4.1.9.9.370.1.8.7Counter32read-onlycurrent
cspTcTotalPktSent
OBJECT-TYPE
The total number of TCP packets sent.
1.3.6.1.4.1.9.9.370.1.8.8Counter32read-onlycurrent
cspTcDataPktSent
OBJECT-TYPE
The total number of TCP data packets sent.
1.3.6.1.4.1.9.9.370.1.8.9Counter32read-onlycurrent
cspTcDataByteSent
OBJECT-TYPE
The total amount of data sent.
1.3.6.1.4.1.9.9.370.1.8.10Counter32read-onlycurrent
cspTcTotalPktRcv
OBJECT-TYPE
The total number of TCP packets received.
1.3.6.1.4.1.9.9.370.1.8.11Counter32read-onlycurrent
cspTcPktRcvSeq
OBJECT-TYPE
The total number of TCP data packets received in sequence.
1.3.6.1.4.1.9.9.370.1.8.12Counter32read-onlycurrent
cspTcByteRcvSeq
OBJECT-TYPE
The total amount of data received in sequence.
1.3.6.1.4.1.9.9.370.1.8.13Counter32read-onlycurrent
cspSslCountersInfo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.9
cspSslCountersClearTime
OBJECT-TYPE
The last time when the SSL counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
1.3.6.1.4.1.9.9.370.1.9.1TimeStampread-onlycurrent
cspSslCounters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.10
cspScConnAttempt
OBJECT-TYPE
The total number of SSL connections attempted.
1.3.6.1.4.1.9.9.370.1.10.1Counter32read-onlycurrent
cspScConnComplete
OBJECT-TYPE
The total number of SSL connections completed.
1.3.6.1.4.1.9.9.370.1.10.2Counter32read-onlycurrent
cspScConnInHandShake
OBJECT-TYPE
The number of SSL connections currently in handshake phase.
1.3.6.1.4.1.9.9.370.1.10.3Gauge32read-onlycurrent
cspScConnInDataPhase
OBJECT-TYPE
The number of SSL connections currently in data phase.
1.3.6.1.4.1.9.9.370.1.10.4Gauge32read-onlycurrent
cspScRenegAttempt
OBJECT-TYPE
The total number of SSL renegotiations attempted.
1.3.6.1.4.1.9.9.370.1.10.5Counter32read-onlycurrent
cspScConnInReneg
OBJECT-TYPE
The number of SSL connections currently in renegotiation phase
1.3.6.1.4.1.9.9.370.1.10.6Gauge32read-onlycurrent
cspScActiveSessions
OBJECT-TYPE
The number of active SSL sessions. This number indicates the number of valid session entries in the session cache.
1.3.6.1.4.1.9.9.370.1.10.7Gauge32read-onlycurrent
cspScMaxHandShakeConns
OBJECT-TYPE
This indicates the maximum number of connections present in handshake phase at any point of time
1.3.6.1.4.1.9.9.370.1.10.8Gauge32read-onlycurrent
cspScCurrDeviceQLen
OBJECT-TYPE
The current device queue length. Indicates the number of requests pending with the device.
1.3.6.1.4.1.9.9.370.1.10.9Gauge32read-onlycurrent
cspScMaxDeviceQLen
OBJECT-TYPE
The maximum device queue length recorded. Indicates the maximum number of requests queued to the device at any point of time.
1.3.6.1.4.1.9.9.370.1.10.10Gauge32read-onlycurrent
cspScSessionReuses
OBJECT-TYPE
The number of session reuses. Indicates the number of times the sessions got reused before the session timer expired.
1.3.6.1.4.1.9.9.370.1.10.11Counter32read-onlycurrent
cspSsl3Counters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.11
cspS3cFullHandShake
OBJECT-TYPE
The total number of full SSL 3.0 handshakes completed.
1.3.6.1.4.1.9.9.370.1.11.1Counter32read-onlycurrent
cspS3cResumedHandShake
OBJECT-TYPE
The total number of SSL 3.0 resumed handshakes completed.
1.3.6.1.4.1.9.9.370.1.11.2Counter32read-onlycurrent
cspS3cHandShakeFailed
OBJECT-TYPE
The total number of SSL 3.0 connections failed in handshake phase.
1.3.6.1.4.1.9.9.370.1.11.3Counter32read-onlycurrent
cspS3cDataFailed
OBJECT-TYPE
The total number of SSL 3.0 sessions failed in data phase.
1.3.6.1.4.1.9.9.370.1.11.4Counter32read-onlycurrent
cspS3cBadMacRcvd
OBJECT-TYPE
The total number of received SSL 3.0 records which have bad MAC (Message Authentication Code).
1.3.6.1.4.1.9.9.370.1.11.5Counter32read-onlycurrent
cspS3cPadErrors
OBJECT-TYPE
The total number of received SSL 3.0 records which have pad errors.
1.3.6.1.4.1.9.9.370.1.11.6Counter32read-onlycurrent
cspS3cRSArc4128md5
OBJECT-TYPE
The total number of SSL 3.0 connections which used cipher suite RSA_WITH_RC4_128_MD5.
1.3.6.1.4.1.9.9.370.1.11.7Counter32read-onlycurrent
cspS3cRSArc4128sha
OBJECT-TYPE
The total number of SSL 3.0 connections which used cipher suite RSA_WITH_RC4_128_SHA.
1.3.6.1.4.1.9.9.370.1.11.8Counter32read-onlycurrent
cspS3cRSAdescbcsha
OBJECT-TYPE
The total number of SSL 3.0 connections which used cipher suite RSA_WITH_DES_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.11.9Counter32read-onlycurrent
cspS3cRSA3desedecbcsha
OBJECT-TYPE
The total number of SSL 3.0 connections which used cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.11.10Counter32read-onlycurrent
cspTls1Counters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.12
cspTlcFullHandShake
OBJECT-TYPE
The total number of full TLS 1.0 handshakes completed.
1.3.6.1.4.1.9.9.370.1.12.1Counter32read-onlycurrent
cspTlcResumedHandShake
OBJECT-TYPE
The total number of resumed TLS 1.0 handshakes completed.
1.3.6.1.4.1.9.9.370.1.12.2Counter32read-onlycurrent
cspTlcHandShakeFailed
OBJECT-TYPE
The total number of TLS 1.0 connections failed in handshake phase.
1.3.6.1.4.1.9.9.370.1.12.3Counter32read-onlycurrent
cspTlcDataFailed
OBJECT-TYPE
The total number of TLS 1.0 connections failed in data phase.
1.3.6.1.4.1.9.9.370.1.12.4Counter32read-onlycurrent
cspTlcBadMacRcvd
OBJECT-TYPE
The total number of received TLS 1.0 records which have bad MAC (Message Authentication Code.
1.3.6.1.4.1.9.9.370.1.12.5Counter32read-onlycurrent
cspTlcPadErrors
OBJECT-TYPE
The total number of received TLS 1.0 records which have pad errors.
1.3.6.1.4.1.9.9.370.1.12.6Counter32read-onlycurrent
cspTlcRSArc4128md5
OBJECT-TYPE
The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_RC4_128_MD5.
1.3.6.1.4.1.9.9.370.1.12.7Counter32read-onlycurrent
cspTlcRSArc4128sha
OBJECT-TYPE
The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_RC4_128_SHA.
1.3.6.1.4.1.9.9.370.1.12.8Counter32read-onlycurrent
cspTlcRSAdescbcsha
OBJECT-TYPE
The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_DES_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.12.9Counter32read-onlycurrent
cspTlcRSA3desedecbcsha
OBJECT-TYPE
The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.12.10Counter32read-onlycurrent
cspSslCryptoCounters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.13
cspSccBlksEncrypted
OBJECT-TYPE
The total number of data blocks that got encrypted.
1.3.6.1.4.1.9.9.370.1.13.1Counter32read-onlycurrent
cspSccBlksDecrypted
OBJECT-TYPE
The total number of data blocks that got decrypted.
1.3.6.1.4.1.9.9.370.1.13.2Counter32read-onlycurrent
cspSccBytesEncrypted
OBJECT-TYPE
The total number of bytes that got encrypted.
1.3.6.1.4.1.9.9.370.1.13.3Counter32read-onlycurrent
cspSccBytesDecrypted
OBJECT-TYPE
The total number of bytes that got decrypted.
1.3.6.1.4.1.9.9.370.1.13.4Counter32read-onlycurrent
cspSccPublicKeyOpers
OBJECT-TYPE
The total number of RSA public key operations performed.
1.3.6.1.4.1.9.9.370.1.13.5Counter32read-onlycurrent
cspSccPrivateKeyOpers
OBJECT-TYPE
The total number of RSA private key operations performed.
1.3.6.1.4.1.9.9.370.1.13.6Counter32read-onlycurrent
cspSccCryptoFails
OBJECT-TYPE
The total number of failed cryptographic operations.
1.3.6.1.4.1.9.9.370.1.13.7Counter32read-onlycurrent
cspSccDmaErrors
OBJECT-TYPE
The total number of cryptographic device DMA errors.
1.3.6.1.4.1.9.9.370.1.13.8Counter32read-onlycurrent
cspSslErrorCounters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.14
cspSecSessAllocFailed
OBJECT-TYPE
The total number of times SSL session could not be allocated.
1.3.6.1.4.1.9.9.370.1.14.1Counter32read-onlycurrent
cspSecSessLimitExceed
OBJECT-TYPE
The total number of times configured SSL session limit got exceeded. The new connections will be rejected if the session limit is exceeded.
1.3.6.1.4.1.9.9.370.1.14.2Counter32read-onlycurrent
cspSecHShakeInitFailed
OBJECT-TYPE
The total number of times SSL connections failed even before the handshake phase got started. This typically indicates that there is some connectivity problem with the server.
1.3.6.1.4.1.9.9.370.1.14.3Counter32read-onlycurrent
cspSecRenegFailed
OBJECT-TYPE
The total number of times SSL renegotiation failed.
1.3.6.1.4.1.9.9.370.1.14.4Counter32read-onlycurrent
cspSecFatalAlertsRcvd
OBJECT-TYPE
The total number of fatal alerts received.
1.3.6.1.4.1.9.9.370.1.14.5Counter32read-onlycurrent
cspSecFatalAlertsSent
OBJECT-TYPE
The total number of fatal alerts sent.
1.3.6.1.4.1.9.9.370.1.14.6Counter32read-onlycurrent
cspSecNoCipherAlerts
OBJECT-TYPE
The total number of ALERT_HANDSHAKE_FAIL alerts sent due to unsupported cipher suites.
1.3.6.1.4.1.9.9.370.1.14.7Counter32read-onlycurrent
cspSecVerMismatchAlerts
OBJECT-TYPE
The total number of ALERT_PROTOCOL_VERSION alerts sent due to unsupported version number.
1.3.6.1.4.1.9.9.370.1.14.8Counter32read-onlycurrent
cspSecNoComprsnAlerts
OBJECT-TYPE
The total number of ALERT_HANDSHAKE_FAIL alerts sent due to unsupported compression scheme.
1.3.6.1.4.1.9.9.370.1.14.9Counter32read-onlycurrent
cspSecHShakeHndleMemFail
OBJECT-TYPE
The total number of handshake handle memory allocation failure.
1.3.6.1.4.1.9.9.370.1.14.10Counter32read-onlycurrent
cspSecStalePakDrop
OBJECT-TYPE
The total number of stale packets dropped. Indicates the number of packets received after the SSL connection is torn down.
1.3.6.1.4.1.9.9.370.1.14.11Counter32read-onlycurrent
cspSecServiceIdDiscard
OBJECT-TYPE
The total number of connections rejected because of invalid service identifiers.
1.3.6.1.4.1.9.9.370.1.14.12Counter32read-onlycurrent
cspSecHShakeLimitExceed
OBJECT-TYPE
The total number of times simultaneous handshake connection exceeded the capacity. The new connections will be rejected if the total number of simultaneous handshake connections exceeds the limit.
1.3.6.1.4.1.9.9.370.1.14.13Counter32read-onlycurrent
cspSecDevConnCtxtFail
OBJECT-TYPE
The total number of times device context could not be allocated.
1.3.6.1.4.1.9.9.370.1.14.14Counter32read-onlycurrent
cspSecMemAllocFailed
OBJECT-TYPE
The total number of times memory allocation failed.
1.3.6.1.4.1.9.9.370.1.14.15Counter32read-onlycurrent
cspSecBuffAllocFailed
OBJECT-TYPE
The total number of times buffer allocation failed.
1.3.6.1.4.1.9.9.370.1.14.16Counter32read-onlycurrent
cspSecAlertSendFailed
OBJECT-TYPE
The total number of failure to send alerts. This is typically because of the memory allocation failure.
1.3.6.1.4.1.9.9.370.1.14.17Counter32read-onlycurrent
cspSecOverloadDropped
OBJECT-TYPE
The total number of connections rejected because of overload conditions. This indicates that the incoming rate is higher than what can be handled.
1.3.6.1.4.1.9.9.370.1.14.18Counter32read-onlycurrent
cspSecConnAborted
OBJECT-TYPE
The total number of SSL connections aborted.
1.3.6.1.4.1.9.9.370.1.14.19Counter32read-onlycurrent
cspPsCounters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.15
cspPsCountersTable
OBJECT-TYPE
A list of proxy service global counter entries
1.3.6.1.4.1.9.9.370.1.15.1not-accessiblecurrent
cspPsCounterEntry
OBJECT-TYPE
The proxy service global counter entry. Each entry displays the global SSL counters collected for a proxy service.
1.3.6.1.4.1.9.9.370.1.15.1.1not-accessiblecurrent
cspPscClearTime
OBJECT-TYPE
The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
1.3.6.1.4.1.9.9.370.1.15.1.1.1TimeStampread-onlycurrent
cspPscConnAttempt
OBJECT-TYPE
The total number of SSL connections attempted.
1.3.6.1.4.1.9.9.370.1.15.1.1.2Counter32read-onlycurrent
cspPscConnComplete
OBJECT-TYPE
The total number of SSL connections completed.
1.3.6.1.4.1.9.9.370.1.15.1.1.3Counter32read-onlycurrent
cspPscFullHandShake
OBJECT-TYPE
The total number of full handshakes completed.
1.3.6.1.4.1.9.9.370.1.15.1.1.4Counter32read-onlycurrent
cspPscResumedHandShake
OBJECT-TYPE
The total number of resumed handshakes completed.
1.3.6.1.4.1.9.9.370.1.15.1.1.5Counter32read-onlycurrent
cspPscConnInHandShake
OBJECT-TYPE
The number of connections currently in handshake phase.
1.3.6.1.4.1.9.9.370.1.15.1.1.6Gauge32read-onlycurrent
cspPscConnInDataPhase
OBJECT-TYPE
The number of connections currently in data phase.
1.3.6.1.4.1.9.9.370.1.15.1.1.7Gauge32read-onlycurrent
cspPscRenegAttempt
OBJECT-TYPE
The total number of SSL renegotiations attempted.
1.3.6.1.4.1.9.9.370.1.15.1.1.8Counter32read-onlycurrent
cspPscConnInReneg
OBJECT-TYPE
The number of connections currently in renegotiation phase.
1.3.6.1.4.1.9.9.370.1.15.1.1.9Gauge32read-onlycurrent
cspPscBlksEncrypted
OBJECT-TYPE
The total number of data blocks that got encrypted.
1.3.6.1.4.1.9.9.370.1.15.1.1.10Counter32read-onlycurrent
cspPscBlksDecrypted
OBJECT-TYPE
The total number of data blocks that got decrypted.
1.3.6.1.4.1.9.9.370.1.15.1.1.11Counter32read-onlycurrent
cspPscBytesEncrypted
OBJECT-TYPE
The total number of bytes that got encrypted.
1.3.6.1.4.1.9.9.370.1.15.1.1.12Counter32read-onlycurrent
cspPscBytesDecrypted
OBJECT-TYPE
The total number of bytes that got decrypted.
1.3.6.1.4.1.9.9.370.1.15.1.1.13Counter32read-onlycurrent
cspPscValidSessions
OBJECT-TYPE
The total number of current valid sessions in the session cache.
1.3.6.1.4.1.9.9.370.1.15.1.1.14Counter32read-onlycurrent
cspPscSessLimitExceed
OBJECT-TYPE
The total number of times configured SSL session limit got exceeded. The new connections will be rejected if the session limit is exceeded.
1.3.6.1.4.1.9.9.370.1.15.1.1.15Counter32read-onlycurrent
cspPscHandShakeFailed
OBJECT-TYPE
The total number of times SSL connections failed in handshake phase.
1.3.6.1.4.1.9.9.370.1.15.1.1.16Counter32read-onlycurrent
cspPscDataFailed
OBJECT-TYPE
The total number of times SSL connections failed in data phase.
1.3.6.1.4.1.9.9.370.1.15.1.1.17Counter32read-onlycurrent
cspPscFatalAlertsRcvd
OBJECT-TYPE
The total number of fatal alerts received.
1.3.6.1.4.1.9.9.370.1.15.1.1.18Counter32read-onlycurrent
cspPscFatalAlertsSent
OBJECT-TYPE
The total number of fatal alerts sent.
1.3.6.1.4.1.9.9.370.1.15.1.1.19Counter32read-onlycurrent
cspPscBadMacRcvd
OBJECT-TYPE
The total number of received SSL records which have bad MAC (Message Authentication Code).
1.3.6.1.4.1.9.9.370.1.15.1.1.20Counter32read-onlycurrent
cspPscPadErrors
OBJECT-TYPE
The total number of received SSL records which have pad errors.
1.3.6.1.4.1.9.9.370.1.15.1.1.21Counter32read-onlycurrent
cspPscNoCipherAlerts
OBJECT-TYPE
The total number of alerts sent due to unsupported cipher suites.
1.3.6.1.4.1.9.9.370.1.15.1.1.22Counter32read-onlycurrent
cspPscNoComprsnAlerts
OBJECT-TYPE
The total number of alerts sent due to unsupported compression scheme.
1.3.6.1.4.1.9.9.370.1.15.1.1.23Counter32read-onlycurrent
cspPscVerMismatchAlerts
OBJECT-TYPE
The total number of alerts sent due to unsupported SSL or TLS version.
1.3.6.1.4.1.9.9.370.1.15.1.1.24Counter32read-onlycurrent
cspPsSsl3Counters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.16
cspPsSsl3CountersTable
OBJECT-TYPE
A list of proxy service SSL 3.0 counter entries.
1.3.6.1.4.1.9.9.370.1.16.1not-accessiblecurrent
cspPsSsl3CounterEntry
OBJECT-TYPE
The proxy service SSL 3.0 counter entry. This entry reports the counters collected about the SSL 3.0 protocol for each proxy service.
1.3.6.1.4.1.9.9.370.1.16.1.1not-accessiblecurrent
cspPs3cClearTime
OBJECT-TYPE
The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have the value of zero.
1.3.6.1.4.1.9.9.370.1.16.1.1.1TimeStampread-onlycurrent
cspPs3cFullHandShake
OBJECT-TYPE
The total number of SSL 3.0 full handshakes completed.
1.3.6.1.4.1.9.9.370.1.16.1.1.2Counter32read-onlycurrent
cspPs3cResumedHandShake
OBJECT-TYPE
The total number of SSL 3.0 resumed handshakes completed.
1.3.6.1.4.1.9.9.370.1.16.1.1.3Counter32read-onlycurrent
cspPs3cHandShakeFailed
OBJECT-TYPE
The total number of SSL 3.0 connections failed in handshake phase.
1.3.6.1.4.1.9.9.370.1.16.1.1.4Counter32read-onlycurrent
cspPs3cDataFailed
OBJECT-TYPE
The total number of SSL 3.0 connections failed in data phase.
1.3.6.1.4.1.9.9.370.1.16.1.1.5Counter32read-onlycurrent
cspPs3cBadMacRcvd
OBJECT-TYPE
The total number of received SSL 3.0 records which have bad MAC (Message Authentication Code).
1.3.6.1.4.1.9.9.370.1.16.1.1.6Counter32read-onlycurrent
cspPs3cPadErrors
OBJECT-TYPE
The total number of received SSL 3.0 records which have pad errors.
1.3.6.1.4.1.9.9.370.1.16.1.1.7Counter32read-onlycurrent
cspPs3cRSArc4128md5
OBJECT-TYPE
The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_RC4_128_MD5.
1.3.6.1.4.1.9.9.370.1.16.1.1.8Counter32read-onlycurrent
cspPs3cRSArc4128sha
OBJECT-TYPE
The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_RC4_128_SHA.
1.3.6.1.4.1.9.9.370.1.16.1.1.9Counter32read-onlycurrent
cspPs3cRSAdescbcsha
OBJECT-TYPE
The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_DES_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.16.1.1.10Counter32read-onlycurrent
cspPs3cRSA3desedecbcsha
OBJECT-TYPE
The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.16.1.1.11Counter32read-onlycurrent
cspPsTls1Counters
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.17
cspPsTls1CountersTable
OBJECT-TYPE
A list of proxy service TLS 1.0 counter entries.
1.3.6.1.4.1.9.9.370.1.17.1not-accessiblecurrent
cspPsTls1CounterEntry
OBJECT-TYPE
The proxy service TLS 1.0 counter entry. This entry displays counters collected about the TLS 1.0 protocol for each proxy service.
1.3.6.1.4.1.9.9.370.1.17.1.1not-accessiblecurrent
cspPt1cClearTime
OBJECT-TYPE
The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
1.3.6.1.4.1.9.9.370.1.17.1.1.1TimeStampread-onlycurrent
cspPt1cFullHandShake
OBJECT-TYPE
The total number of TLS 1.0 full handshakes completed.
1.3.6.1.4.1.9.9.370.1.17.1.1.2Counter32read-onlycurrent
cspPt1cResumedHandShake
OBJECT-TYPE
The total number of TLS 1.0 resumed handshakes completed.
1.3.6.1.4.1.9.9.370.1.17.1.1.3Counter32read-onlycurrent
cspPt1cHandShakeFailed
OBJECT-TYPE
The total number of TLS 1.0 connections failed in handshake phase.
1.3.6.1.4.1.9.9.370.1.17.1.1.4Counter32read-onlycurrent
cspPt1cDataFailed
OBJECT-TYPE
The total number of TLS 1.0 connections failed in data phase.
1.3.6.1.4.1.9.9.370.1.17.1.1.5Counter32read-onlycurrent
cspPt1cBadMacRcvd
OBJECT-TYPE
The total number of received TLS 1.0 records which have bad MAC (Message Authentication Code).
1.3.6.1.4.1.9.9.370.1.17.1.1.6Counter32read-onlycurrent
cspPt1cPadErrors
OBJECT-TYPE
The total number of received TLS 1.0 records which have pad errors.
1.3.6.1.4.1.9.9.370.1.17.1.1.7Counter32read-onlycurrent
cspPt1cRSArc4128md5
OBJECT-TYPE
The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_RC4_128_MD5.
1.3.6.1.4.1.9.9.370.1.17.1.1.8Counter32read-onlycurrent
cspPt1cRSArc4128sha
OBJECT-TYPE
The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_RC4_128_SHA.
1.3.6.1.4.1.9.9.370.1.17.1.1.9Counter32read-onlycurrent
cspPt1cRSAdescbcsha
OBJECT-TYPE
The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_DES_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.17.1.1.10Counter32read-onlycurrent
cspPt1cRSA3desedecbcsha
OBJECT-TYPE
The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
1.3.6.1.4.1.9.9.370.1.17.1.1.11Counter32read-onlycurrent
cspCpuStatusInfo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.18
cspCpuStatusTable
OBJECT-TYPE
A list of CPU status information entries.
1.3.6.1.4.1.9.9.370.1.18.1not-accessiblecurrent
cspCpuStatusEntry
OBJECT-TYPE
The CPU status information entry. Each entry displays the operational status and usage information about one CPU on the proxy device. A proxy device can have one or more CPU's.
1.3.6.1.4.1.9.9.370.1.18.1.1not-accessiblecurrent
cspCpuName
OBJECT-TYPE
The unique name of a CPU on the proxy device.
1.3.6.1.4.1.9.9.370.1.18.1.1.1SnmpAdminString (SIZE(1..20))not-accessiblecurrent
cspCpuStatus
OBJECT-TYPE
The operational status of the CPU.
1.3.6.1.4.1.9.9.370.1.18.1.1.2INTEGER {up(1), down(2)}read-onlycurrent
cspCpuClearTime
OBJECT-TYPE
The last time when the CPU counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
1.3.6.1.4.1.9.9.370.1.18.1.1.3TimeStampread-onlycurrent
cspCpuProcessUtil
OBJECT-TYPE
The percentage of CPU time utilized at process level.
1.3.6.1.4.1.9.9.370.1.18.1.1.4Gauge32read-onlycurrent
cspCpuInterruptUtil
OBJECT-TYPE
The percentage of CPU time utilized at interrupt level.
1.3.6.1.4.1.9.9.370.1.18.1.1.5Gauge32read-onlycurrent
cspCpuProcessUtilIn5Sec
OBJECT-TYPE
The percentage of CPU time utilized at process level within the past five seconds.
1.3.6.1.4.1.9.9.370.1.18.1.1.6Gauge32read-onlycurrent
cspCpuProcessUtilIn1Min
OBJECT-TYPE
The percentage of CPU time utilized at process level within the past minute.
1.3.6.1.4.1.9.9.370.1.18.1.1.7Gauge32read-onlycurrent
cspCpuProcessUtilIn5Min
OBJECT-TYPE
The percentage of CPU time utilized at process level within the past five minutes.
1.3.6.1.4.1.9.9.370.1.18.1.1.8Gauge32read-onlycurrent
cspCpuInterruptUtilIn5Sec
OBJECT-TYPE
The percentage of CPU time utilized at interrupt level within the past five seconds.
1.3.6.1.4.1.9.9.370.1.18.1.1.9Gauge32read-onlycurrent
cspCpuInterruptUtilIn1Min
OBJECT-TYPE
The percentage of CPU time utilized at interrupt level within the past minute.
1.3.6.1.4.1.9.9.370.1.18.1.1.10Gauge32read-onlycurrent
cspCpuInterruptUtilIn5Min
OBJECT-TYPE
The percentage of CPU time utilized at interrupt level within the past five minutes.
1.3.6.1.4.1.9.9.370.1.18.1.1.11Gauge32read-onlycurrent
cspHttpHeaderInsertedInfo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.19
cspHttpHeaderInsertedSslInfoStats
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.19.1
cspNumOfSslInfoSuccessInserted
OBJECT-TYPE
This object represents the total number of times SSL headers were successfully inserted. The number of individual SSL session headers and SSL server header within a SSL header insertion are not counted separately.
1.3.6.1.4.1.9.9.370.1.19.1.1Counter32read-onlycurrent
cspNumOfSslInfoFailedInserted
OBJECT-TYPE
This object represents the number of failed insertions of SSL information into HTTP headers.
1.3.6.1.4.1.9.9.370.1.19.1.2Counter32read-onlycurrent
cspNumOfSpoofHttpHeaderDeleted
OBJECT-TYPE
This object represents the number of times a header in the incoming HTTP request was deleted because of possible header spoofing.
1.3.6.1.4.1.9.9.370.1.19.1.3Counter32read-onlycurrent
cspNumOfSslSessHeaderExtracted
OBJECT-TYPE
This object represents the number of SSL session headers extracted.
1.3.6.1.4.1.9.9.370.1.19.1.4Counter32read-onlycurrent
cspNumOfSslSessHeaderFailedExtracted
OBJECT-TYPE
This object represents the number of SSL session headers that failed to be extracted.
1.3.6.1.4.1.9.9.370.1.19.1.5Counter32read-onlycurrent
cspNumOfSslServerCertHeaderExtracted
OBJECT-TYPE
This object represents the total number of SSL server certificate headers extracted successfully.
1.3.6.1.4.1.9.9.370.1.19.1.6Counter32read-onlycurrent
cspNumOfSslServerCerHeaderFailedExtracted
OBJECT-TYPE
This object represents the number of SSL server certificate headers that failed to be extracted.
1.3.6.1.4.1.9.9.370.1.19.1.7Counter32read-onlycurrent
cspNumOfTimesSslHeaderTruncated
OBJECT-TYPE
This object represents the number of times SSL headers were truncated because the size of SSL data inserted exceeds maximum length value.
1.3.6.1.4.1.9.9.370.1.19.1.8Counter32read-onlycurrent
cspHttpHeaderInsertedSslClientCertStats
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.19.2
cspNumOfSslClientCertHeaderExtracted
OBJECT-TYPE
This object represents the total number of SSL client certificate headers extracted successfully.
1.3.6.1.4.1.9.9.370.1.19.2.1Counter32read-onlycurrent
cspNumOfSslClientCertHeaderFailedExtracted
OBJECT-TYPE
This object represents the number of SSL client certificate headers that failed to be extracted.
1.3.6.1.4.1.9.9.370.1.19.2.2Counter32read-onlycurrent
cspHttpRedirectInfo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.20
cspHttpRedirectClientCertAuthFailedStats
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.20.1
cspCertNotYetValidRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason client certificate is not valid yet.
1.3.6.1.4.1.9.9.370.1.20.1.1Counter32read-onlycurrent
cspCertExpiredRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason expired client certificate.
1.3.6.1.4.1.9.9.370.1.20.1.2Counter32read-onlycurrent
cspIssuerCertNotFoundRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects because issuer certificate could not be found. This occurs if the issuer certificate of an untrusted certificate cannot be found.
1.3.6.1.4.1.9.9.370.1.20.1.3Counter32read-onlycurrent
cspCertRevokedRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason revoked client certificate.
1.3.6.1.4.1.9.9.370.1.20.1.4Counter32read-onlycurrent
cspNoClientCertSentRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason client certificate was not sent.
1.3.6.1.4.1.9.9.370.1.20.1.5Counter32read-onlycurrent
cspNoCrlAvailableRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason no CRL available during revocation check.
1.3.6.1.4.1.9.9.370.1.20.1.6Counter32read-onlycurrent
cspCrlExpiredRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason CRL expired during revocation check.
1.3.6.1.4.1.9.9.370.1.20.1.7Counter32read-onlycurrent
cspCertSignatureFailedRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason invalid certificate signature.
1.3.6.1.4.1.9.9.370.1.20.1.8Counter32read-onlycurrent
cspOtherCertErrorRedirect
OBJECT-TYPE
This object represents the number of HTTP redirects with reason other certificate errors.
1.3.6.1.4.1.9.9.370.1.20.1.9Counter32read-onlycurrent
cspSslResourceNotifInfo
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.1.21
cspSslTrapType
OBJECT-TYPE
This object indicates the type of trap issued by cspSSLResourceLimitReached notification.
1.3.6.1.4.1.9.9.370.1.21.1INTEGER {risingHighThresh(1), fallingHighThresh(3)}accessible-for-notifycurrent
cspSslMaxConn
OBJECT-TYPE
This object specifies the maximum allowed SSL (SSLv3 and TLSv1) connections per system as configured by the user.
1.3.6.1.4.1.9.9.370.1.21.2Unsigned32read-writecurrent
cspSslActiveConn
OBJECT-TYPE
This object indicates the active SSL (SSLv3 and TLSv1) connections per system.
1.3.6.1.4.1.9.9.370.1.21.3Gauge32read-onlycurrent
cspSslConfigHighConnPcnt
OBJECT-TYPE
This object specifies the percentage of the maximum SSL connections per system as configured by the user.
1.3.6.1.4.1.9.9.370.1.21.4Unsigned32read-writecurrent
cspSslActiveConnPcnt
OBJECT-TYPE
This object indicates the percentage of the active SSL connections per system based on cspSslActiveConn. The notification will be send when the cspSslActiveConnPcnt count exceeds cspSslConfigHighConnPcnt.
1.3.6.1.4.1.9.9.370.1.21.5Unsigned32read-onlycurrent
cspSslConfigWatermarkConnPcnt
OBJECT-TYPE
This object specifies the SSL connections watermark threshold value (in percentage) per system allowed as configured by the user. The value of cspSslConfigWatermarkPcnt should be less than cspSslConfigHighConnPcnt.
1.3.6.1.4.1.9.9.370.1.21.6Unsigned32read-writecurrent
cspMIBConformance
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.2
cspMIBCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.2.1
cspMIBGroups
OBJECT-IDENTITY
1.3.6.1.4.1.9.9.370.2.2

Notifications

NameOIDStatus
cspServOperStatus
NOTIFICATION-TYPE
The proxy service operation status change notification. When the Operation Status of a proxy service changes, and cspGcNotifyProxyServOperStatus is 'true', a notification will be issued. The notification contains the current operation status and the down reason of the proxy service.
1.3.6.1.4.1.9.9.370.0.1current
cspServCertExpiring
NOTIFICATION-TYPE
The proxy service certificate expiring notification. If the time interval cspGcPSCertExpireInterval is positive, and cspGcNotifyPSCertExpiring is 'true', a notification will be issued for every proxy service certificate that will be expiring within this time interval. This notification is issued only once for each of these certificates. If the interval is changed from a positive value to 0, the proxy device will clear its memory of notification issued in the past, and stop issuing new notification. The notification contains the subject name, the serial number and the issuer name of the certificate, the serial number of the issuer's certificate, and the end date on the certificate.
1.3.6.1.4.1.9.9.370.0.2current
cspSSLResourceLimitReached
NOTIFICATION-TYPE
This notification is issued on the following scenarios: 1) When the value of cpsSslActiveConnPcnt exceeds the value of cspSslConfigHighConnPcnt 2) When the value of cpsSslActiveConn falls below the watermark value represented by cspSslConfigWatermarkPcnt.
1.3.6.1.4.1.9.9.370.0.3current

Conformance

NameOIDStatus
cspMIBCompliance
MODULE-COMPLIANCE
The compliance statement for entities which implement the Cisco SSL Proxy MIB.
1.3.6.1.4.1.9.9.370.2.1.1deprecated
cspMIBComplianceRev1
MODULE-COMPLIANCE
The compliance statement for entities which implement the Cisco SSL Proxy MIB.
1.3.6.1.4.1.9.9.370.2.1.2deprecated
cspMIBComplianceRev2
MODULE-COMPLIANCE
The compliance statement for entities which implement the Cisco SSL Proxy MIB.
1.3.6.1.4.1.9.9.370.2.1.3current
cspGlobalConfigGroup
OBJECT-GROUP
A collection of global configuration objects.
1.3.6.1.4.1.9.9.370.2.2.1current
cspProxyServiceConfigGroup
OBJECT-GROUP
A collection of configuration objects for a proxy service.
1.3.6.1.4.1.9.9.370.2.2.2current
cspPolicyConfigGroup
OBJECT-GROUP
A collection of configuration objects for a policy.
1.3.6.1.4.1.9.9.370.2.2.3current
cspTcpGroup
OBJECT-GROUP
A collection of TCP protocol objects.
1.3.6.1.4.1.9.9.370.2.2.4current
cspSslGroup
OBJECT-GROUP
A collection of SSL handshake protocol statistics.
1.3.6.1.4.1.9.9.370.2.2.5current
cspSsl3Group
OBJECT-GROUP
A collection of SSL 3.0 protocol statistics.
1.3.6.1.4.1.9.9.370.2.2.6current
cspTls1Group
OBJECT-GROUP
A collection of TLS 1.0 protocol statistics.
1.3.6.1.4.1.9.9.370.2.2.7current
cspSslCryptoGroup
OBJECT-GROUP
A collection of cryptographic statistics.
1.3.6.1.4.1.9.9.370.2.2.8current
cspSslErrorGroup
OBJECT-GROUP
A collection of SSL protocol error counters.
1.3.6.1.4.1.9.9.370.2.2.9current
cspProxyServiceStatsGroup
OBJECT-GROUP
A collection of proxy service statistics.
1.3.6.1.4.1.9.9.370.2.2.10current
cspProxyServiceSsl3Group
OBJECT-GROUP
A collection of SSL 3.0 statistics for a proxy service.
1.3.6.1.4.1.9.9.370.2.2.11current
cspProxyServiceTls1Group
OBJECT-GROUP
A collection of TLS 1.0 statistics for a proxy service.
1.3.6.1.4.1.9.9.370.2.2.12current
cspCpuStatusGroup
OBJECT-GROUP
A collection of statuses and usage information about each CPU on the SSL proxy device.
1.3.6.1.4.1.9.9.370.2.2.13current
cspProxyServiceNotificationGroup
NOTIFICATION-GROUP
A collection of notifications for signaling important proxy service events.
1.3.6.1.4.1.9.9.370.2.2.14current
cspHttpHeaderInsertedSslInfoGroup
OBJECT-GROUP
A collection of stats related to the insertion of SSL session and SSL server certificate information into HTTP header.
1.3.6.1.4.1.9.9.370.2.2.15current
cspHttpHeaderInsertedSslClientCertGroup
OBJECT-GROUP
A collection of stats related to the insertion of SSL client certificate information into HTTP header.
1.3.6.1.4.1.9.9.370.2.2.16current
cspHttpRedirectInfoGroup
OBJECT-GROUP
A collection of counters for http redirect due to client certificate authentication failure type.
1.3.6.1.4.1.9.9.370.2.2.17current
cspSslResourceLimitNotifObjectsGroup
OBJECT-GROUP
Collection of the objects for connection notification related configuration and information.
1.3.6.1.4.1.9.9.370.2.2.18current
cspSslResourceLimitNotifGroup
NOTIFICATION-GROUP
A collection of notifications for signaling important resource limit exceed signalling.
1.3.6.1.4.1.9.9.370.2.2.19current