MIBs Depot

ENTERASYS-FIREWALL-MIB

Registered at
1.3.6.1.4.1.5624.1.2.37
Last updated
2004-11-17 22:22
Organization
Enterasys Networks, Inc
Revisions
2004-11-17 22:22
Namespace
enterasys
Source file
ENTERASYS-FIREWALL-MIB
Digest
sha256:a0c0ec874aaaf72cba95645afbf886a087da01b81aded87f4ae683ee52a546e4

Description

This MIB module defines a portion of the SNMP MIB under the Enterasys Networks enterprise OID pertaining to the configuration, policy, and monitoring of firewall network devices.

Contact

Postal: Enterasys Networks 50 Minuteman Rd. Andover, MA 01801-1008 USA Phone: +1 978 684 1000 E-mail: support@enterasys.com WWW: http://www.enterasys.com

Imports

FromSymbols
ENTERASYS-MIB-NAMESetsysModules
IF-MIBifIndex
INET-ADDRESS-MIBInetAddress, InetAddressType, InetPortNumber
SNMP-FRAMEWORK-MIBSnmpAdminString
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
SNMPv2-SMICounter32, Gauge32, Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDateAndTime, DisplayString, RowStatus, StorageType, TEXTUAL-CONVENTION, TimeStamp, TruthValue, VariablePointer

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

ENTERASYS-FIREWALL-MIB
ENTERASYS-MIB-NAMES
IANAifType-MIB
IF-MIB
INET-ADDRESS-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-CONF
SNMPv2-MIB
SNMPv2-SMI
SNMPv2-TC

Objects

NameOIDSyntaxAccessStatus
etsysFWConfigurationObjects
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.1
etsysFWFirewallEnabled
OBJECT-TYPE
The current state of the firewall is returned when this value is read. Setting the value to true causes the firewall to start inspecting packets. Setting the value to false causes the firewall to stop inspecting packets. The value read could be different than the last value set if the state is changed by a means other than this MIB.
1.3.6.1.4.1.5624.1.2.37.1.1TruthValueread-writecurrent
etsysFWTcpTimeout
OBJECT-TYPE
Firewalls can perform stateful inspection of TCP sessions. TCP sessions are created and deleted by monitoring TCP SYNC/ACK/FIN flags. Inactivity for the period specified by this object will delete the TCP session.
1.3.6.1.4.1.5624.1.2.37.1.2Unsigned32read-writecurrent
etsysFWUdpTimeout
OBJECT-TYPE
Firewalls can perform stateful inspection of UDP sessions. UDP sessions are created on the first outbound UDP packet. Inactivity for the period specified by this object will delete the UDP session.
1.3.6.1.4.1.5624.1.2.37.1.3Unsigned32read-writecurrent
etsysFWIcmpTimeout
OBJECT-TYPE
ICMP sessions are created on an outbound ICMP echo request. Inactivity for the period specified by this object will delete the ICMP session.
1.3.6.1.4.1.5624.1.2.37.1.4Unsigned32read-writecurrent
etsysFWAuthTimeout
OBJECT-TYPE
Firewalls can be configured to only allow packets from IP addresses that have been authenticated. An authenticated IP address will need to re-authenticate if there is no traffic from that address for the period specified by this object.
1.3.6.1.4.1.5624.1.2.37.1.5Unsigned32read-writecurrent
etsysFWAuthPort
OBJECT-TYPE
Firewalls can be configured to only allow packets from IP addresses that have been authenticated. This object specifies the port on which the firewall listens for authentication requests.
1.3.6.1.4.1.5624.1.2.37.1.6Integer32 (1024..65535)read-writecurrent
etsysFWLoggingThreshold
OBJECT-TYPE
The threshold for firewall event logging. Events with severity equal to or less than the value specified will be logged. The value corresponds to syslog severity levels as defined in RFC3164.
1.3.6.1.4.1.5624.1.2.37.1.7Integer32 (0..7)read-writecurrent
etsysFWRPCMicrosoftTimeout
OBJECT-TYPE
The idle session timeout on packet inspection for Remote Procedure Call (RPC) -based applications. This Application Level Gateway (ALG) supports two types of RPCs - SUN (used by most UNIX systems) and Microsoft. If the RPC-based session is idle for the specified period, it will be shutdown.
1.3.6.1.4.1.5624.1.2.37.1.8Unsigned32read-writecurrent
etsysFWRPCSunTimeout
OBJECT-TYPE
The idle session timeout on packet inspection for Remote Procedure Call (RPC) -based applications. This Application Level Gateway (ALG) supports two types of RPCs - SUN (used by most UNIX systems) and Microsoft. If the RPC-based session is idle for the specified period, it will be shutdown.
1.3.6.1.4.1.5624.1.2.37.1.9Unsigned32read-writecurrent
etsysFWFirewallOnIntfLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWFirewallOnIntfTable was last modified.
1.3.6.1.4.1.5624.1.2.37.1.10TimeStampread-onlycurrent
etsysFWFirewallOnIntfTable
OBJECT-TYPE
This table defines the state of the firewall on individual interfaces. The firewall may be enabled or disabled for each interface on the device. The effective state of the firewall depends on the setting of etsysFWFirewallEnabled. | | interface etsysFWFirewallEnabled | etsysFWFirewallOnIntfEnabled | effective | | state ----------------------------------------------------------------- true true enabled true false disabled false true disabled false false disabled If an interface is not represented in this table, then its effective state is determined by etsysFWFirewallEnabled. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWFirewallOnIntfStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWFirewallOnIntfStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.1.11not-accessiblecurrent
etsysFWFirewallOnIntfEntry
OBJECT-TYPE
A row defining whether firewall is enabled for a particular interface.
1.3.6.1.4.1.5624.1.2.37.1.11.1not-accessiblecurrent
etsysFWFirewallOnIntfEnabled
OBJECT-TYPE
The current state of the firewall is returned when this value is read. This setting is only effective when etsysFWFirewallEnabled is true. Setting the value to true causes the firewall to start inspecting packets, if etsysFWFirewallEnabled is true. Setting the value to false causes the firewall to stop inspecting packets, if etsysFWFirewallEnabled is true.
1.3.6.1.4.1.5624.1.2.37.1.11.1.1TruthValueread-createcurrent
etsysFWFirewallOnIntfStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.1.11.1.2StorageTyperead-createcurrent
etsysFWFirewallOnIntfRowStatus
OBJECT-TYPE
The status of this conceptual row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.1.11.1.3RowStatusread-createcurrent
etsysFWFirewallIntfFilterLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWFirewallIntfFilterTable was last modified.
1.3.6.1.4.1.5624.1.2.37.1.12TimeStampread-onlycurrent
etsysFWFirewallIntfFilterTable
OBJECT-TYPE
This table defines the IP filters applied to individual interfaces. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWFirewallIntfFilterStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWFirewallIntfFilterStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.1.13not-accessiblecurrent
etsysFWFirewallIntfFilterEntry
OBJECT-TYPE
A row defining the IP filters applied to individual interfaces.
1.3.6.1.4.1.5624.1.2.37.1.13.1not-accessiblecurrent
etsysFWFirewallIntfFilterType
OBJECT-TYPE
The type of IP filter that applies on a particular interface. ipBroadcast - This filter type allows incoming/outgoing IP packets through the firewall with 255.255.255.255 set as the destination address. It enables broadcast protocols such as DHCP to traverse the firewall. ipMulticast - This filter type allows incoming/outgoing IP packets with a multicast destination address through the firewall. It enables multicast protocols such as RIP and OSPF to traverse the firewall. ipOptionAll - All IP options allowed. ipOptionOther - Any IP option other than those explicitly supported by the command. ipOptionLooseSourceRoute - Requests routing that includes the specified routers. This routing path includes a sequence of IP addresses a datagram must follow to its destination but allows multiple network hops between successive addresses on the list. ipOptionRecordRoute - Traces a route. It allows the source to create an empty list of IP addresses and arrange for each router that router that handles a datagram to add its IP address to the list. When a datagram arrives, the destination device can extract and and process the list of addresses. ipOptionStrictSourceRoute - Specifies an exact route through the Internet. This routing path includes a sequence of IP addresses a datagram must follow, hop by hop, from its source to destination. The path between two successive addresses in the list must consist of a single physical network. ipOptionTimeStamp - Records timestamps along a route. It is similar to the record route option in that every router from source to destination adds its IP address, and a timestamp, to the list. The timestamp notes the time and date a router handled the datagram, expressed in milliseconds since midnight, Universal Time.
1.3.6.1.4.1.5624.1.2.37.1.13.1.1INTEGER {ipBroadcast(1), ipMulticast(2), ipOptionAll(3), ipOptionOther(4), ipOptionLooseSourceRoute(5), ipOptionRecordRoute(6), ipOptionStrictSourceRoute(7), ipOptionTimeStamp(8)}not-accessiblecurrent
etsysFWFirewallIntfFilterDirection
OBJECT-TYPE
The direction which the filter is applied. none - Denies the packet that matched the filter type. in - Allows the packet that matched the filter type to enter the interface. out - Allows the packet that matched the filter type to exit the interface. both - Allows the packet that matched the filter type to enter and exit the interface.
1.3.6.1.4.1.5624.1.2.37.1.13.1.2INTEGER {none(1), in(2), out(3), both(4)}read-createcurrent
etsysFWFirewallIntfFilterStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.1.13.1.3StorageTyperead-createcurrent
etsysFWFirewallIntfFilterRowStatus
OBJECT-TYPE
The status of this conceptual row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.1.13.1.4RowStatusread-createcurrent
etsysFWPolicyObjects
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.2
etsysFWPolicyGroups
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.2.1
etsysFWSystemPolicyGroupName
OBJECT-TYPE
The name of the policy group containing the global system policy. The value of etsysFWSystemPolicyGroupName should be used as an index into the etsysFWGroupPolicyTable to determine the list of rules that MUST be applied to the system. A zero length string indicates no system wide policy exists, and the default policy of 'allow' should be executed until one is imposed by either this object or by the interface processing the packet. Since policy group names are unique, the etsysFWSystemPolicyGroupName MUST NOT be equal to any etsysFWIntfToGroupName objects.
1.3.6.1.4.1.5624.1.2.37.2.1.1SnmpAdminString (SIZE(0..32))read-writecurrent
etsysFWIntfToGroupLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWIntfToGroupTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.1.2TimeStampread-onlycurrent
etsysFWIntfToGroupTable
OBJECT-TYPE
This table defines the group of firewall rules applied to individual interfaces. Rules for this group will be applied in the etsysFWGroupPolicyTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWIntfToGroupStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWIntfToGroupStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.1.3not-accessiblecurrent
etsysFWIntfToGroupEntry
OBJECT-TYPE
A row defining the group name for a particular interface.
1.3.6.1.4.1.5624.1.2.37.2.1.3.1not-accessiblecurrent
etsysFWIntfToGroupIntfDirection
OBJECT-TYPE
Defines the direction of the packets to inspect, incoming (ingress), or outgoing (egress).
1.3.6.1.4.1.5624.1.2.37.2.1.3.1.1INTEGER {ingress(1), egress(2)}not-accessiblecurrent
etsysFWIntfToGroupName
OBJECT-TYPE
The group name for this interface. The value of etsysFWIntfToGroupName should be used as index into the etsysFWGroupPolicyTable to determine the list of rules that MUST be applied to this interface. Since policy group names are unique, the etsysFWIntfToGroupName MUST NOT be equal to the etsysFWSystemPolicyGroupName object.
1.3.6.1.4.1.5624.1.2.37.2.1.3.1.2SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWIntfToGroupStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.1.3.1.3StorageTyperead-createcurrent
etsysFWIntfToGroupRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.2.1.3.1.4RowStatusread-createcurrent
etsysFWGroupPolicyLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWGroupPolicyTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.1.4TimeStampread-onlycurrent
etsysFWGroupPolicyTable
OBJECT-TYPE
This table defines the firewall rules applied to groups. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWGroupPolicyStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWGroupPolicyStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.1.5not-accessiblecurrent
etsysFWGroupPolicyEntry
OBJECT-TYPE
A row defining a particular group policy rule and its priority.
1.3.6.1.4.1.5624.1.2.37.2.1.5.1not-accessiblecurrent
etsysFWGroupPolicyName
OBJECT-TYPE
The name of the group. These names should be either the etsysFWSystemPolicyGroupName or the etsysFWIntfToGroupName from the etsysFWIntfToGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.1.5.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWGroupPolicyRuleDef
OBJECT-TYPE
An etsysFWPolicyRuleDefName from the etsysFWPolicyRuleDefTable.
1.3.6.1.4.1.5624.1.2.37.2.1.5.1.2SnmpAdminStringnot-accessiblecurrent
etsysFWGroupPolicyPriority
OBJECT-TYPE
The priority of rule in the group. The firewall applies the rules from the lowest to the highest priority. Priority can only be in the range of 0 to the maximum number of policyRuleDef in the group + 1. i.e. If there are 5 policies in the group. The maximum priority the user can create is 6.
1.3.6.1.4.1.5624.1.2.37.2.1.5.1.3Integer32 (0..65535)read-createcurrent
etsysFWGroupPolicyStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.1.5.1.4StorageTyperead-createcurrent
etsysFWGroupPolicyRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.2.1.5.1.5RowStatusread-createcurrent
etsysFWPolicyRules
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.2.2
etsysFWPolicyRuleDefMaxEntries
OBJECT-TYPE
The maximum number of entries allowed in the etsysFWPolicyRuleDefTable.
1.3.6.1.4.1.5624.1.2.37.2.2.1Integer32 (1..65535)read-onlycurrent
etsysFWPolicyRuleDefNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWPolicyRuleDefTable.
1.3.6.1.4.1.5624.1.2.37.2.2.2Gauge32read-onlycurrent
etsysFWPolicyRuleDefLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWPolicyRuleDefTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.2.3TimeStampread-onlycurrent
etsysFWPolicyRuleDefTable
OBJECT-TYPE
This table defines a policy rule by associating a network objects with a filter or a set of filters and an action to take when the filter is true. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWPolicyRuleDefStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWPolicyRuleDefStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.2.4not-accessiblecurrent
etsysFWPolicyRuleDefEntry
OBJECT-TYPE
A row defining a particular policy definition. A rule definition binds a filter pointer to an action.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1not-accessiblecurrent
etsysFWPolicyRuleDefName
OBJECT-TYPE
etsysFWPolicyRuleDefName is the administratively assigned name of the policy rule.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWPolicyRuleDefSrcNetwork
OBJECT-TYPE
If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefDstNetwork, the firewall will evaluate the etsysFWPolicyRuleDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.2VariablePointerread-createcurrent
etsysFWPolicyRuleDefDstNetwork
OBJECT-TYPE
If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWPolicyRuleDefDstNetwork, the firewall will evaluate the etsysFWPolicyRuleDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.3VariablePointerread-createcurrent
etsysFWPolicyRuleDefBidirectional
OBJECT-TYPE
A policy may be specified as bidirectional to mean that it also operates with the etsysFWPolicyRuleDefSrcNetwork and etsysFWPolicyRuleDefDstNetwork reversed. If this column is false, the policy operates only in the direction defined by etsysFWPolicyRuleDefSrcNetwork and etsysFWPolicyRuleDefDstNetwork.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.4TruthValueread-createcurrent
etsysFWPolicyRuleDefService
OBJECT-TYPE
etsysFWPolicyRuleDefFilter points to a filter which is used to evaluate whether the action associated with this row should be fired or not. The action will only fire if the filter referenced by this object evaluates to true. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other filter tables or scalars as well: etsysFWIpHeaderFilterTable etsysFWIpOptionsFilterTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.5VariablePointerread-createcurrent
etsysFWPolicyRuleAuthName
OBJECT-TYPE
The authentication group name to use.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.6SnmpAdminStringread-createcurrent
etsysFWPolicyRuleDefAction
OBJECT-TYPE
The action to take when the filter is true. allow: the packet should be allowed drop: the packet should be dropped allowAuth: the packet is allowed if the source address has been authenticated to the group.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.7INTEGER {allow(1), allowAuth(2), drop(3)}read-createcurrent
etsysFWPolicyRuleDefLogging
OBJECT-TYPE
When the filter is true, log the activity of this rule.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.8TruthValueread-createcurrent
etsysFWPolicyRuleDefStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.9StorageTyperead-createcurrent
etsysFWPolicyRuleDefRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object SHOULD NOT be set to active until the containing networks and filters have been defined. Once active, it MUST remain active until no etsysFWGroupPolicyRuleDef entries are referencing it.
1.3.6.1.4.1.5624.1.2.37.2.2.4.1.10RowStatusread-createcurrent
etsysFWPolicyNetworks
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.2.3
etsysFWNetworkGroupMaxEntries
OBJECT-TYPE
The maximum number of entries allowed in the etsysFWNetworkGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.3.1Integer32 (1..65535)read-onlycurrent
etsysFWNetworkGroupNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWNetworkGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.3.2Gauge32read-onlycurrent
etsysFWNetworkGroupLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWNetworkGroupTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.3.3TimeStampread-onlycurrent
etsysFWNetworkGroupTable
OBJECT-TYPE
A table defining a group of network objects from the etsysFWNetworkTable or a network group in etsysFWNetworkGroupTable. The networks contained in the group are defined in the etsysFWNetwkInNetGrpTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWNetworkGroupStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWNetworkGroupStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.3.4not-accessiblecurrent
etsysFWNetworkGroupEntry
OBJECT-TYPE
An entry in the etsysFWNetworkGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.3.4.1not-accessiblecurrent
etsysFWNetworkGroupName
OBJECT-TYPE
The administratively assigned name of the network group.
1.3.6.1.4.1.5624.1.2.37.2.3.4.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWNetworkGroupStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.3.4.1.2StorageTyperead-createcurrent
etsysFWNetworkGroupRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it MAY NOT have its value changed if any active rows in the etsysFWNetwkInNetGrpTable or the etsysFWFilterDefTable are currently pointing at this row.
1.3.6.1.4.1.5624.1.2.37.2.3.4.1.3RowStatusread-createcurrent
etsysFWNetworkGroupMaxNetworks
OBJECT-TYPE
The maximum number of networks allowed in a network group.
1.3.6.1.4.1.5624.1.2.37.2.3.5Integer32 (1..65535)read-onlycurrent
etsysFWNetwkInNetGrpLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWNetwkInNetGrpTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.3.6TimeStampread-onlycurrent
etsysFWNetwkInNetGrpTable
OBJECT-TYPE
A table defining the networks in a network group. All etsysFWNetwkInNetGrpSubNetwork objects in a etsysFWNetworkGroupName must have the same etsysFWNetworkIPVersion and etsysFWNetworkRealm. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWNetwkInNetGrpStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWNetwkInNetGrpStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.3.7not-accessiblecurrent
etsysFWNetwkInNetGrpEntry
OBJECT-TYPE
An entry in the etsysFWNetwkInNetGrpTable.
1.3.6.1.4.1.5624.1.2.37.2.3.7.1not-accessiblecurrent
etsysFWNetwkInNetGrpSubNetwork
OBJECT-TYPE
The location of the contained network. The MIB defines the following tables which may be pointed to by this column: etsysFWNetworkTable Implementations should prevent recursion and return the inconsistentName exception if the SnmpAdminString value references an etsysFWNetworkGroupTable row that already contains the etsysFWNetworkGroupName of this row. If this column is set to a SnmpAdminString value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the SnmpAdminString is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.3.7.1.1SnmpAdminStringnot-accessiblecurrent
etsysFWNetwkInNetGrpStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.3.7.1.2StorageTyperead-createcurrent
etsysFWNetwkInNetGrpRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object cannot be made active until the network or network group referenced by the etsysFWNetwkInNetGrpSubNetwork is both defined and is active. An attempt to do so will result in an inconsistentValue error.
1.3.6.1.4.1.5624.1.2.37.2.3.7.1.3RowStatusread-createcurrent
etsysFWNetworkMaxEntries
OBJECT-TYPE
The maximum number of entries allowed in the etsysFWNetworkTable.
1.3.6.1.4.1.5624.1.2.37.2.3.8Integer32 (1..65535)read-onlycurrent
etsysFWNetworkNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWNetworkTable.
1.3.6.1.4.1.5624.1.2.37.2.3.9Gauge32read-onlycurrent
etsysFWNetworkLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWNetworkTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.3.10TimeStampread-onlycurrent
etsysFWNetworkTable
OBJECT-TYPE
A table defining the networks associated with filters to create the firewall policy rules. Networks can be defined with a network IP address and mask, an IP address range, or a single IP host address. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWNetworkStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWNetworkStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.3.11not-accessiblecurrent
etsysFWNetworkEntry
OBJECT-TYPE
An entry in the etsysFWNetworkTable.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1not-accessiblecurrent
etsysFWNetworkName
OBJECT-TYPE
The administratively assigned name of the network.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWNetworkRealm
OBJECT-TYPE
A network is qualified as either an internal or external address.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.2INTEGER {internal(1), external(2)}read-createcurrent
etsysFWNetworkRangeOrMask
OBJECT-TYPE
When set to useIpAddrRange, the etsysFWNetworkIPAddrBegin and etsysFWNetworkIPAddrEnd define the network object in this row. When set to useIpAddrMask, the etsysFWNetworkIPAddrBegin and etsysFWNetworkIPAddrMask define the network object in this row.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.3INTEGER {useIpAddrRange(1), useIpAddrMask(2)}read-createcurrent
etsysFWNetworkIPVersion
OBJECT-TYPE
The Internet Protocol version the addresses are to match against. The value of this property determines the size and format of the etsysFWNetworkIPAddressBegin, etsysFWNetworkIPAddressEnd and etsysFWNetworkIPAddressMask objects. Values of unknown, ipv4z, ipv6z and dns are not legal values for this object.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.4InetAddressTyperead-createcurrent
etsysFWNetworkIPAddressBegin
OBJECT-TYPE
The IP address that with either the etsysFWNetworkIPAddrEnd or etsysFWNetworkIPAddrMask define the network object for this row.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.5InetAddressread-createcurrent
etsysFWNetworkIPAddressEnd
OBJECT-TYPE
When etsysFWNetworkRangeOrMask is set to useIpAddrRange, this is the end of the IP address range. To define a single host set this to the value of etsysFWNetworkIpAddrBegin.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.6InetAddressread-createcurrent
etsysFWNetworkIPAddressMask
OBJECT-TYPE
When etsysFWNetworkRangeOrMask is set to useIpAddrMask, this is the mask that define the IP network. To define a single host set this to all 1's.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.7InetAddressread-createcurrent
etsysFWNetworkStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.8StorageTyperead-createcurrent
etsysFWNetworkRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it MAY NOT have its value changed if any active rows in the etsysFWNetwkInNetGrpTable or the etsysFWFilterDefTable are currently pointing at this row.
1.3.6.1.4.1.5624.1.2.37.2.3.11.1.9RowStatusread-createcurrent
etsysFWPolicyServices
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.2.4
etsysFWServiceGroupMaxEntries
OBJECT-TYPE
The maximum number of entries allowed in the etsysFWServiceGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.4.1Integer32 (1..65535)read-onlycurrent
etsysFWServiceGroupNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWServiceGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.4.2Gauge32read-onlycurrent
etsysFWServiceGroupLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWServiceGroupTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.4.3TimeStampread-onlycurrent
etsysFWServiceGroupTable
OBJECT-TYPE
A table defining a group of service objects from the etsysFWServiceTable or a service group in etsysFWServiceGroupTable. The services contained in the group are defined in the etsysFWNetwkInNetGrpTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWServiceGroupStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWServiceGroupStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.4.4not-accessiblecurrent
etsysFWServiceGroupEntry
OBJECT-TYPE
An entry in the etsysFWServiceGroupTable.
1.3.6.1.4.1.5624.1.2.37.2.4.4.1not-accessiblecurrent
etsysFWServiceGroupName
OBJECT-TYPE
The administratively assigned name of the service group.
1.3.6.1.4.1.5624.1.2.37.2.4.4.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWServiceGroupStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.4.4.1.2StorageTyperead-createcurrent
etsysFWServiceGroupRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. Once active, it MAY NOT have its value changed if any active rows in the etsysFWNetwkInNetGrpTable or the etsysFWFilterDefTable are currently pointing at this row.
1.3.6.1.4.1.5624.1.2.37.2.4.4.1.3RowStatusread-createcurrent
etsysFWServiceGroupMaxServices
OBJECT-TYPE
The maximum number of services allowed in a service group.
1.3.6.1.4.1.5624.1.2.37.2.4.5Integer32 (1..65535)read-onlycurrent
etsysFWServiceInSvcGrpLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWServiceInSvcTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.4.6TimeStampread-onlycurrent
etsysFWServiceInSvcGrpTable
OBJECT-TYPE
A table defining the services in a service group. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWServiceInSvcGrpStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWServiceInSvcGrpStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.4.7not-accessiblecurrent
etsysFWServiceInSvcGrpEntry
OBJECT-TYPE
An entry in the etsysFWServiceInSvcGrpTable.
1.3.6.1.4.1.5624.1.2.37.2.4.7.1not-accessiblecurrent
etsysFWServiceInSvcGrpSubService
OBJECT-TYPE
The location of the contained service. The MIB defines the following tables which may be pointed to by this column: etsysFWServiceTable Implementations should prevent recursion and return the inconsistentName exception if the SnmpAdminString value references an etsysFWServiceGroupTable row that already contains the etsysFWServiceGroupName of this row. If this column is set to a SnmpAdminString value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the SnmpAdminString is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.4.7.1.1SnmpAdminStringnot-accessiblecurrent
etsysFWServiceInSvcGrpStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.4.7.1.2StorageTyperead-createcurrent
etsysFWServiceInSvcGrpRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object cannot be made active until the service or service group referenced by the etsysFWNetwkInNetGrpSubService is both defined and is active. An attempt to do so will result in an inconsistentValue error.
1.3.6.1.4.1.5624.1.2.37.2.4.7.1.3RowStatusread-createcurrent
etsysFWServiceMaxEntries
OBJECT-TYPE
The maximum number of entries allowed in the etsysFWServiceTable.
1.3.6.1.4.1.5624.1.2.37.2.4.8Integer32 (1..65535)read-onlycurrent
etsysFWServiceNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWServiceTable.
1.3.6.1.4.1.5624.1.2.37.2.4.9Gauge32read-onlycurrent
etsysFWServiceLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWServiceTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.4.10TimeStampread-onlycurrent
etsysFWServiceTable
OBJECT-TYPE
This table contains a list of service definitions to be used within the etsysFWPolicyRuleDefTable. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWServiceStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWServiceStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.4.11not-accessiblecurrent
etsysFWServiceEntry
OBJECT-TYPE
A definition of a service.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1not-accessiblecurrent
etsysFWServiceName
OBJECT-TYPE
The administrative name for this filter.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWServiceSrcLowPort
OBJECT-TYPE
The low port of the port range a packet's source must match against. To match, the port number must be greater than or equal to this value. This object is only used if sourcePort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.2InetPortNumberread-createcurrent
etsysFWServiceSrcHighPort
OBJECT-TYPE
The high port of the port range a packet's source must match against. To match, the port number must be less than or equal to this value. This object is only used if sourcePort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.3InetPortNumberread-createcurrent
etsysFWServiceDstLowPort
OBJECT-TYPE
The low port of the port range a packet's destination must match against. To match, the port number must be greater than or equal to this value. This object is only used if destinationPort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.4InetPortNumberread-createcurrent
etsysFWServiceDstHighPort
OBJECT-TYPE
The high port of the port range a packet's destination must match against. To match, the port number must be less than or equal to this value. This object is only used if destinationPort is set in etsysFWServiceType, in which case the value of 0 for this object is illegal.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.5InetPortNumberread-createcurrent
etsysFWServiceProtocol
OBJECT-TYPE
The protocol number the incoming packet must match against for this filter to be evaluated as true. This object is only used if protocol is set in etsysFWServiceType.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.6INTEGER {tcp(1), udp(2)}read-createcurrent
etsysFWServiceStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.7StorageTyperead-createcurrent
etsysFWServiceRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.2.4.11.1.8RowStatusread-createcurrent
etsysFWPolicyFilters
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.2.5
etsysFWFilterDefMaxEntries
OBJECT-TYPE
The maximum number of entries allowed in the etsysFWFilterDefTable.
1.3.6.1.4.1.5624.1.2.37.2.5.1Integer32 (1..65535)read-onlycurrent
etsysFWFilterDefNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWFilterDefTable.
1.3.6.1.4.1.5624.1.2.37.2.5.2Gauge32read-onlycurrent
etsysFWFilterDefLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWFilterDefTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.5.3TimeStampread-onlycurrent
etsysFWFilterDefTable
OBJECT-TYPE
This table defines a policy rule by associating a network objects with a filter or a set of filters and an action to take when the filter is true. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWFilterDefStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWFilterDefStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.5.4not-accessiblecurrent
etsysFWFilterDefEntry
OBJECT-TYPE
A row defining a particular filter definition. A rule definition binds a filter pointer to an action.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1not-accessiblecurrent
etsysFWFilterDefName
OBJECT-TYPE
etsysFWFilterDefName is the administratively assigned name of the policy rule.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWFilterDefSrcNetwork
OBJECT-TYPE
If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWFilterDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWFilterDefDstNetwork, the firewall will evaluate the etsysFWFilterDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to an SnmpAdminString value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.2VariablePointerread-createcurrent
etsysFWFilterDefDstNetwork
OBJECT-TYPE
If the source address of the packet is in the set of addresses defined by the network object pointed to by etsysFWFilterDefSrcNetwork and the destination address is in the set of addresses defined by the network object pointed to by etsysFWFilterDefDstNetwork, the firewall will evaluate the etsysFWFilterDefFilter for the packet. This MIB defines the following tables which may be pointed to by this column. Implementations may choose to provide support for other network tables or scalars as well: etsysFWNetworkGroupTable etsysFWNetworkTable If this column is set to a VariablePointer value which references a non-existent row in an otherwise supported table, the inconsistentName exception should be returned. If the table or scalar pointed to by the VariablePointer is not supported at all, then an inconsistentValue exception should be returned.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.3VariablePointerread-createcurrent
etsysFWFilterDefBidirectional
OBJECT-TYPE
A policy may be specified as bidirectional to mean that it also operates with the etsysFWFilterDefSrcNetwork and etsysFWFilterDefDstNetwork reversed. If this column is false, the policy operates only in the direction defined by etsysFWFilterDefSrcNetwork and etsysFWFilterDefDstNetwork.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.4TruthValueread-createcurrent
etsysFWFilterDefProtocol
OBJECT-TYPE
x
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.5Integer32read-createcurrent
etsysFWFilterDefICMPType
OBJECT-TYPE
x
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.6Integer32read-createcurrent
etsysFWFilterDefLogging
OBJECT-TYPE
When the filter is true, log the activity of this rule.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.7TruthValueread-createcurrent
etsysFWFilterDefStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.8StorageTyperead-createcurrent
etsysFWFilterDefRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified. This object SHOULD NOT be set to active until the containing networks and filters have been defined. Once active, it MUST remain active until no etsysFWGroupFilterDef entries are referencing it.
1.3.6.1.4.1.5624.1.2.37.2.5.4.1.9RowStatusread-createcurrent
etsysFWCLSFilterMaxFilters
OBJECT-TYPE
The maximum number of CLS filters allowed per etsysFWPolicyRuleDefName.
1.3.6.1.4.1.5624.1.2.37.2.5.5Integer32 (1..65535)read-onlycurrent
etsysFWCLSFilterLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWCLSFilterTable was last modified.
1.3.6.1.4.1.5624.1.2.37.2.5.6TimeStampread-onlycurrent
etsysFWCLSFilterTable
OBJECT-TYPE
This table defines the command line string filters that can be applied to a policy rule definition. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWGroupPolicyStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWGroupPolicyStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.5.7not-accessiblecurrent
etsysFWCLSFilterEntry
OBJECT-TYPE
A row defining a particular command line string filter.
1.3.6.1.4.1.5624.1.2.37.2.5.7.1not-accessiblecurrent
etsysFWCLSFilterIndex
OBJECT-TYPE
.
1.3.6.1.4.1.5624.1.2.37.2.5.7.1.1Integer32 (1..256)not-accessiblecurrent
etsysFWCLSFilterWord
OBJECT-TYPE
.
1.3.6.1.4.1.5624.1.2.37.2.5.7.1.2SnmpAdminStringread-createcurrent
etsysFWCLSFilterStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.5.7.1.3StorageTyperead-createcurrent
etsysFWCLSFilterRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.2.5.7.1.4RowStatusread-createcurrent
etsysFWHTMLFilterTable
OBJECT-TYPE
This table contains filters that applies to the HTML protocol. The implementation may choose to allow modifications to this table only under certain SNMP contexts. The etsysFWIpOptionsHeadFiltStorageType for a given SNMP context may be readOnly, meaning the row cannot be modified or deleted. In another SNMP context, the etsysFWIpOptionsHeadFiltStorageType value could allow the row to be modified or deleted.
1.3.6.1.4.1.5624.1.2.37.2.5.8not-accessiblecurrent
etsysFWHTMLFilterEntry
OBJECT-TYPE
A definition of a particular filter.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1not-accessiblecurrent
etsysFWHTMLFilterName
OBJECT-TYPE
The administrative name for this HTML filter.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1.1SnmpAdminString (SIZE(1..32))not-accessiblecurrent
etsysFWHTMLFilterType
OBJECT-TYPE
.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1.2INTEGER {none(1), selected(2), all(3)}read-createcurrent
etsysFWHTMLFilterNetwork
OBJECT-TYPE
.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1.3SnmpAdminStringread-createcurrent
etsysFWHTMLFilterLogging
OBJECT-TYPE
.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1.4TruthValueread-createcurrent
etsysFWHTMLFilterStorageType
OBJECT-TYPE
The storage type for this row.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1.5StorageTyperead-createcurrent
etsysFWHTMLFilterRowStatus
OBJECT-TYPE
This object indicates the conceptual status of this row. The value of this object has no effect on whether other objects in this conceptual row can be modified.
1.3.6.1.4.1.5624.1.2.37.2.5.8.1.6RowStatusread-createcurrent
etsysFWMonitoringObjects
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.3
etsysFWPolicyRuleTrueNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWPolicyRuleTrueTable.
1.3.6.1.4.1.5624.1.2.37.3.1Gauge32read-onlycurrent
etsysFWPolicyRuleTrueLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWPolicyRuleTrueTable was last modified.
1.3.6.1.4.1.5624.1.2.37.3.2TimeStampread-onlycurrent
etsysFWPolicyRuleTrueTable
OBJECT-TYPE
This table contains a counter for the number of times each policy rule has been true during packet inspection since the last restart of the device.
1.3.6.1.4.1.5624.1.2.37.3.3not-accessiblecurrent
etsysFWPolicyRuleTrueEntry
OBJECT-TYPE
A row in the table for a named policy rule definition.
1.3.6.1.4.1.5624.1.2.37.3.3.1not-accessiblecurrent
etsysFWPolicyRuleTrueIndex
OBJECT-TYPE
A unique index for this row.
1.3.6.1.4.1.5624.1.2.37.3.3.1.1Integer32 (1..99999)read-onlycurrent
etsysFWPolicyRuleTrueName
OBJECT-TYPE
The name of the policy rule.
1.3.6.1.4.1.5624.1.2.37.3.3.1.2SnmpAdminStringread-onlycurrent
etsysFWPolicyRuleTrueEvents
OBJECT-TYPE
The number of times since the device has restarted that the rule has been true during packet inspection.
1.3.6.1.4.1.5624.1.2.37.3.3.1.3Counter32read-onlycurrent
etsysFWPolicyRuleTrueLastEvent
OBJECT-TYPE
The date and time when this rule was last true during packet inspection.
1.3.6.1.4.1.5624.1.2.37.3.3.1.4DateAndTimeread-onlycurrent
etsysFWSessionTotalsNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWSessionTotalsTable.
1.3.6.1.4.1.5624.1.2.37.3.4Gauge32read-onlycurrent
etsysFWSessionTotalsLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWSessionTotalsTable was last modified.
1.3.6.1.4.1.5624.1.2.37.3.5TimeStampread-onlycurrent
etsysFWSessionTotalsTable
OBJECT-TYPE
The firewall can perform stateful inspection of packets to allow incoming traffic associated with outgoing packets. These associations are sessions. This table returns data about the total sessions indexed by protocol-id (as defined by the assigned protocol-numbers of the IANA).
1.3.6.1.4.1.5624.1.2.37.3.6not-accessiblecurrent
etsysFWSessionTotalsEntry
OBJECT-TYPE
A row with the session counters for a particular protocol-id.
1.3.6.1.4.1.5624.1.2.37.3.6.1not-accessiblecurrent
etsysFWSessTotIndex
OBJECT-TYPE
A unique index for this row.
1.3.6.1.4.1.5624.1.2.37.3.6.1.1Integer32 (1..999999)read-onlycurrent
etsysFWSessTotProtocolID
OBJECT-TYPE
The protocol-id for this row.
1.3.6.1.4.1.5624.1.2.37.3.6.1.2Unsigned32 (0..255)read-onlycurrent
etsysFWSessTotActiveSessions
OBJECT-TYPE
The total number of active sessions for this protocol.
1.3.6.1.4.1.5624.1.2.37.3.6.1.3Counter32read-onlycurrent
etsysFWSessTotPeakSessions
OBJECT-TYPE
The peak number of sessions for this protocol since the last restart of the device.
1.3.6.1.4.1.5624.1.2.37.3.6.1.4Counter32read-onlycurrent
etsysFWSessTotBlockedSessions
OBJECT-TYPE
The total number of sessions that have been blocked for this protocol since the last restart of the device.
1.3.6.1.4.1.5624.1.2.37.3.6.1.5Counter32read-onlycurrent
etsysFWSessTotLastBlock
OBJECT-TYPE
The date and time of the last blocked session for this protocol.
1.3.6.1.4.1.5624.1.2.37.3.6.1.6DateAndTimeread-onlycurrent
etsysFWIpSessionNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWIpSessionTable.
1.3.6.1.4.1.5624.1.2.37.3.7Gauge32read-onlycurrent
etsysFWIpSessionLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWIpSessionTable was last modified.
1.3.6.1.4.1.5624.1.2.37.3.8TimeStampread-onlycurrent
etsysFWIpSessionTable
OBJECT-TYPE
The firewall can perform stateful inspection of packets to allow incoming traffic associated with outgoing packets. These associations are sessions. This table returns data about the current active sessions.
1.3.6.1.4.1.5624.1.2.37.3.9not-accessiblecurrent
etsysFWIpSessionEntry
OBJECT-TYPE
A row that defines an active session.
1.3.6.1.4.1.5624.1.2.37.3.9.1not-accessiblecurrent
etsysFWIpSessionIndex
OBJECT-TYPE
A unique index for this row.
1.3.6.1.4.1.5624.1.2.37.3.9.1.1Integer32 (1..999999)read-onlycurrent
etsysFWIpSessionIPVersion
OBJECT-TYPE
The Internet Protocol version. The value of this property affects the size and format of the etsysFWIpSessionSrcAddress and etsysFWIpSessionDstAddress objects.
1.3.6.1.4.1.5624.1.2.37.3.9.1.2InetAddressTyperead-onlycurrent
etsysFWIpSessionSrcAddress
OBJECT-TYPE
The source IP address of this session.
1.3.6.1.4.1.5624.1.2.37.3.9.1.3InetAddressread-onlycurrent
etsysFWIpSessionDstAddress
OBJECT-TYPE
The destination IP address of this session.
1.3.6.1.4.1.5624.1.2.37.3.9.1.4InetAddressread-onlycurrent
etsysFWIpSessionSrcPort
OBJECT-TYPE
The source port of this session.
1.3.6.1.4.1.5624.1.2.37.3.9.1.5InetPortNumberread-onlycurrent
etsysFWIpSessionDstPort
OBJECT-TYPE
The destination port of this session.
1.3.6.1.4.1.5624.1.2.37.3.9.1.6InetPortNumberread-onlycurrent
etsysFWIpSessionProtocolID
OBJECT-TYPE
The protocol-id of this session (as defined by the assigned protocol-numbers of the IANA).
1.3.6.1.4.1.5624.1.2.37.3.9.1.7Unsigned32read-onlycurrent
etsysFWIpSessionCreation
OBJECT-TYPE
The date and time this session was created.
1.3.6.1.4.1.5624.1.2.37.3.9.1.8DateAndTimeread-onlycurrent
etsysFWAuthAddressNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWAuthAddressTable.
1.3.6.1.4.1.5624.1.2.37.3.10Gauge32read-onlycurrent
etsysFWAuthAddressLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWAuthAddressTable was last modified.
1.3.6.1.4.1.5624.1.2.37.3.11TimeStampread-onlycurrent
etsysFWAuthAddressTable
OBJECT-TYPE
The firewall has an action to allow traffic only to IP addresses that have authenticated with the firewall. After authentication, the authenticated address remains in a cache as long as there are packets from the address. This table returns the cached authenticated IP addresses. The table rows are removed when the IP address is idle for the number of seconds specified in etsysFWAuthTimeout.
1.3.6.1.4.1.5624.1.2.37.3.12not-accessiblecurrent
etsysFWAuthAddressEntry
OBJECT-TYPE
A row that defines an authenticated IP address.
1.3.6.1.4.1.5624.1.2.37.3.12.1not-accessiblecurrent
etsysFWAuthAddressIndex
OBJECT-TYPE
A unique index for this row.
1.3.6.1.4.1.5624.1.2.37.3.12.1.1Integer32 (1..999999)read-onlycurrent
etsysFWAuthAddressIPVersion
OBJECT-TYPE
The Internet Protocol version. The value of this property affects the size and format of the etsysFWAuthAddressIPAddress object.
1.3.6.1.4.1.5624.1.2.37.3.12.1.2InetAddressTyperead-onlycurrent
etsysFWAuthAddressIPAddress
OBJECT-TYPE
The authenticated IP address.
1.3.6.1.4.1.5624.1.2.37.3.12.1.3InetAddressread-onlycurrent
etsysFWAuthAddressGroupName
OBJECT-TYPE
The group name of the authenticated IP address.
1.3.6.1.4.1.5624.1.2.37.3.12.1.4SnmpAdminStringread-onlycurrent
etsysFWAuthAddressIdleTime
OBJECT-TYPE
The number of seconds this IP address has been idle.
1.3.6.1.4.1.5624.1.2.37.3.12.1.5Integer32read-onlycurrent
etsysFWDoSBlockedNumEntries
OBJECT-TYPE
The current number of entries in the etsysFWDoSBlockedTable.
1.3.6.1.4.1.5624.1.2.37.3.13Gauge32read-onlycurrent
etsysFWDoSBlockedLastChange
OBJECT-TYPE
The sysUpTime at which the etsysFWDoSBlockedTable was last modified.
1.3.6.1.4.1.5624.1.2.37.3.14TimeStampread-onlycurrent
etsysFWDoSBlockedTable
OBJECT-TYPE
Firewalls can provide protection from some common forms of Denial of Service attacks. The firewall will return the total number of times the specific DoS attack has been blocked and the IP address and time of the last blocked attack.
1.3.6.1.4.1.5624.1.2.37.3.15not-accessiblecurrent
etsysFWDoSBlockedEntry
OBJECT-TYPE
A row that defines the statistics for a particular DoS attack.
1.3.6.1.4.1.5624.1.2.37.3.15.1not-accessiblecurrent
etsysFWDoSAttackName
OBJECT-TYPE
The name of a DoS attack. Example names are 'SYN Flood', 'Tear Drop', and 'ICMP Flood'.
1.3.6.1.4.1.5624.1.2.37.3.15.1.1SnmpAdminString (SIZE(1..32))read-onlycurrent
etsysFWDoSSrcIPVersion
OBJECT-TYPE
The Internet Protocol version. The value of this property affects the size and format of the etsysFWDoSScrIPAddress object.
1.3.6.1.4.1.5624.1.2.37.3.15.1.2InetAddressTyperead-onlycurrent
etsysFWDoSSrcIPAddress
OBJECT-TYPE
The source IP address of the last blocked attack.
1.3.6.1.4.1.5624.1.2.37.3.15.1.3InetAddressread-onlycurrent
etsysFWDoSAttackTime
OBJECT-TYPE
The time of the last blocked attack.
1.3.6.1.4.1.5624.1.2.37.3.15.1.4DateAndTimeread-onlycurrent
etsysFWDoSBlockedAttacks
OBJECT-TYPE
The number of times this DoS attack has been blocked since the last restart of the device.
1.3.6.1.4.1.5624.1.2.37.3.15.1.5Counter32read-onlycurrent
etsysFirewallConformance
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.4
etsysFirewallGroups
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.4.1
etsysFirewallCompliances
OBJECT-IDENTITY
1.3.6.1.4.1.5624.1.2.37.4.2

Conformance

NameOIDStatus
etsysFWFirewallEnabledGroup
OBJECT-GROUP
The Firewall Enabled Group.
1.3.6.1.4.1.5624.1.2.37.4.1.1current
etsysFWFirewallConfigGroup
OBJECT-GROUP
The Firewall Configuration Group for general system parameters.
1.3.6.1.4.1.5624.1.2.37.4.1.2current
etsysFWFirewallIntfGroup
OBJECT-GROUP
The Firewall on Interface Enabled Group for enabling the firewall on individual interfaces.
1.3.6.1.4.1.5624.1.2.37.4.1.3current
etsysFWSystemPolicyNameGroup
OBJECT-GROUP
The System Policy Group Name Group.
1.3.6.1.4.1.5624.1.2.37.4.1.4current
etsysFWInterfacePolicyGroup
OBJECT-GROUP
The Interface to Policy Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.5current
etsysFWGroupPolicyGroup
OBJECT-GROUP
The Group Policy to Rule Definition Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.6current
etsysFWPolicyRuleDefGroup
OBJECT-GROUP
The Policy Rule Definition Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.7current
etsysFWNetworkGroupGroup
OBJECT-GROUP
The Network Group Network In Network Group Tables Group
1.3.6.1.4.1.5624.1.2.37.4.1.8current
etsysFWNetworkGroup
OBJECT-GROUP
The Network Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.9current
etsysFWServiceGroupGroup
OBJECT-GROUP
The Service Group in Servce Group Tables Group.
1.3.6.1.4.1.5624.1.2.37.4.1.10current
etsysFWServiceGroup
OBJECT-GROUP
The Service Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.11current
etsysFWFilterGroup
OBJECT-GROUP
The Filter Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.12current
etsysFWCLSFilterGroup
OBJECT-GROUP
The CLS Filter Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.13current
etsysFWHTMLFilterGroup
OBJECT-GROUP
The HTML Filter Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.14current
etsysFWPolicyRuleTrueGroup
OBJECT-GROUP
The Policy Rule True Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.15current
etsysFWSessionTotalsGroup
OBJECT-GROUP
The Firewall Session Totals Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.16current
etsysFWIpSessionGroup
OBJECT-GROUP
The Firewall IP Sessions Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.17current
etsysFWAuthAddressGroup
OBJECT-GROUP
The Firewall Authenticated Addresses Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.18current
etsysFWDoSBlockedGroup
OBJECT-GROUP
The Firewall DoS Blocked Attacks Table Group.
1.3.6.1.4.1.5624.1.2.37.4.1.19current
etsysFirewallCompliance
MODULE-COMPLIANCE
The compliance statement for devices that support the etsysFirewallMIB.
1.3.6.1.4.1.5624.1.2.37.4.2.1current