ENTERASYS-THREAT-NOTIFICATION-MIB
- Registered at
- 1.3.6.1.4.1.5624.1.2.45
- Last updated
- 2005-09-14 13:14
- Organization
- Enterasys Networks, Inc
- Revisions
- 2005-09-14 13:14, 2005-02-11 15:14, 2004-07-19 17:58, 2004-03-10 15:47
- Namespace
- enterasys
- Source file
ENTERASYS-THREAT-NOTIFICATION-MIB- Digest
sha256:b8062290a5dfa90b6042d25cfea1cc1dbd7562c97343f1fee3331d9d2136be08
Description
This MIB module defines the portion of the SNMP enterprise MIBs under Enterasys Networks' enterprise OID pertaining to the Threat Notification feature.
Contact
Postal: Enterasys Networks 50 Minuteman Rd. Andover, MA 01810-1008 USA Phone: +1 978 684 1000 E-mail: support@enterasys.com WWW: http://www.enterasys.com
Imports
| From | Symbols |
|---|---|
| ENTERASYS-MIB-NAMES | etsysModules |
| IF-MIB | InterfaceIndex |
| INET-ADDRESS-MIB | InetAddress, InetAddressType |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Integer32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, iso |
| SNMPv2-TC | DateAndTime, DisplayString, MacAddress, TEXTUAL-CONVENTION |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
ENTERASYS-MIB-NAMES ENTERASYS-THREAT-NOTIFICATION-MIB IANAifType-MIB IF-MIB INET-ADDRESS-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| etsysThreatNotificationObjects OBJECT-IDENTITY | 1.3.6.1.4.1.5624.1.2.45.1 | |||
| etsysThreatNotificationNotificationBranch OBJECT-IDENTITY | 1.3.6.1.4.1.5624.1.2.45.1.0 | |||
| etsysThreatNotificationSystemBranch OBJECT-IDENTITY | 1.3.6.1.4.1.5624.1.2.45.1.1 | |||
| etsysThreatNotificationSenderID OBJECT-TYPE A name that identifies a sender or group of senders. ie. 'Dragon IDS', ACME IDS', 'VIRUS SCAN', 'DRAGON1', 'DRAGON2' | 1.3.6.1.4.1.5624.1.2.45.1.1.1 | DisplayString (SIZE(0..128)) | accessible-for-notify | current |
| etsysThreatNotificationSenderName OBJECT-TYPE The name of the sensor that discovered the threat. | 1.3.6.1.4.1.5624.1.2.45.1.1.2 | DisplayString (SIZE(0..128)) | accessible-for-notify | current |
| etsysThreatNotificationThreatCategory OBJECT-TYPE A name that identifies a group of threat types. | 1.3.6.1.4.1.5624.1.2.45.1.1.3 | DisplayString (SIZE(0..128)) | accessible-for-notify | current |
| etsysThreatNotificationThreatName OBJECT-TYPE The name of the signature that detected the threat. | 1.3.6.1.4.1.5624.1.2.45.1.1.4 | DisplayString (SIZE(0..255)) | accessible-for-notify | current |
| etsysThreatNotificationDeviceAddressType OBJECT-TYPE The address type of the device where the initiator of the threat was detected. | 1.3.6.1.4.1.5624.1.2.45.1.1.5 | InetAddressType | accessible-for-notify | current |
| etsysThreatNotificationDeviceAddress OBJECT-TYPE The address of the device where the initiator of the threat was detected. | 1.3.6.1.4.1.5624.1.2.45.1.1.6 | InetAddress | accessible-for-notify | current |
| etsysThreatNotificationDeviceIfIndex OBJECT-TYPE The interface where the initiator was detected. | 1.3.6.1.4.1.5624.1.2.45.1.1.7 | InterfaceIndex | accessible-for-notify | current |
| etsysThreatNotificationInitiatorAddressType OBJECT-TYPE The address type of the endstation that initiated the threat. | 1.3.6.1.4.1.5624.1.2.45.1.1.8 | InetAddressType | accessible-for-notify | current |
| etsysThreatNotificationInitiatorAddress OBJECT-TYPE The address of the endstation that initiated the threat. | 1.3.6.1.4.1.5624.1.2.45.1.1.9 | InetAddress | accessible-for-notify | current |
| etsysThreatNotificationTargetAddressType OBJECT-TYPE The address type of the endstation that is threatened. | 1.3.6.1.4.1.5624.1.2.45.1.1.10 | InetAddressType | accessible-for-notify | current |
| etsysThreatNotificationTargetAddress OBJECT-TYPE The address of the endstation that is threatened. | 1.3.6.1.4.1.5624.1.2.45.1.1.11 | InetAddress | accessible-for-notify | current |
| etsysThreatNotificationConsolidatedData OBJECT-TYPE The purpose of this object is to support devices that can only send single varbind notification messages and should only be used in conjunction with etsysThreatNotificationInformationMessage3. The data should be encoded in the following format: object1='data' object2='data' object3='data' ... Here is an example: etsysThreatNotificationSenderID='dragon' etsysThreatNotificationSenderName='dragon' etsysThreatNotificationThreatCategory='ATTACKS' etsysThreatNotificationThreatName='HOST:APACHE:ETC-PASSWD' etsysThreatNotificationInitiatorAddress='1.1.1.1' etsysThreatNotificationTargetAddress='2.2.2.2' | 1.3.6.1.4.1.5624.1.2.45.1.1.12 | DisplayString (SIZE(0..1024)) | accessible-for-notify | current |
| etsysThreatNotificationInitiatorMacAddress OBJECT-TYPE The MAC address of the endstation that is threatened. | 1.3.6.1.4.1.5624.1.2.45.1.1.13 | MacAddress | accessible-for-notify | current |
| etsysThreatNotificationIncidentID OBJECT-TYPE The incident ID of an event. Used by etsysThreatUndoNotificationMessage to undo an action. | 1.3.6.1.4.1.5624.1.2.45.1.1.14 | Integer32 | accessible-for-notify | current |
| etsysThreatNotificationStatus OBJECT-TYPE The status of an event. Used by etsysThreatResponseNotificationMessage. | 1.3.6.1.4.1.5624.1.2.45.1.1.15 | DisplayString (SIZE(0..64)) | accessible-for-notify | current |
| etsysThreatNotificationDetails OBJECT-TYPE The details of an event. Used by etsysThreatResponseNotificationMessage. | 1.3.6.1.4.1.5624.1.2.45.1.1.16 | DisplayString (SIZE(0..255)) | accessible-for-notify | current |
| etsysThreatNotificationAction OBJECT-TYPE The action taken in response to an incident. Used by etsysThreatResponseNotificationMessage. | 1.3.6.1.4.1.5624.1.2.45.1.1.17 | DisplayString (SIZE(0..64)) | accessible-for-notify | current |
| etsysThreatNotificationRuleName OBJECT-TYPE The name of the rule that was applied to this incident. Used by etsysThreatResponseNotificationMessage. | 1.3.6.1.4.1.5624.1.2.45.1.1.18 | DisplayString (SIZE(0..64)) | accessible-for-notify | current |
| etsysThreatNotificationDateTime OBJECT-TYPE The date and time the incident was received. Used by etsysThreatResponseNotificationMessage. | 1.3.6.1.4.1.5624.1.2.45.1.1.19 | DateAndTime | accessible-for-notify | current |
| etsysThreatNotificationLastUpdated OBJECT-TYPE The date and time the event was last updated. Used by etsysThreatResponseNotificationMessage. | 1.3.6.1.4.1.5624.1.2.45.1.1.20 | DateAndTime | accessible-for-notify | current |
| etsysThreatNotificationConformance OBJECT-IDENTITY | 1.3.6.1.4.1.5624.1.2.45.2 | |||
| etsysThreatNotificationGroups OBJECT-IDENTITY | 1.3.6.1.4.1.5624.1.2.45.2.1 | |||
| etsysThreatNotificationCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.5624.1.2.45.2.2 |
Notifications
| Name | OID | Status |
|---|---|---|
| etsysThreatNotificationInformationMessage1 NOTIFICATION-TYPE An etsysThreatNotificationInformationMessage1 indicates that a potential threat has been identified. This trap should be generated when the IP address of the source of the threat is known, but not the device and interface. (etsysThreatNotificationSenderName and etsysThreatNotificationTargetAddress are optional objects) | 1.3.6.1.4.1.5624.1.2.45.1.0.1 | current |
| etsysThreatNotificationInformationMessage2 NOTIFICATION-TYPE An etsysThreatNotificationInformationMessage2 indicates that a potential threat has been identified. This trap should be generated when the device and interface of the threat is known, but the IP address of the source may or may not be known. (etsysThreatNotificationSenderName, etsysThreatNotificationInitiatorAddress and etsysThreatNotificationTargetAddress are optional objects) | 1.3.6.1.4.1.5624.1.2.45.1.0.2 | current |
| etsysThreatNotificationInformationMessage3 NOTIFICATION-TYPE The purpose of etsysThreatNotificationInformationMessage3 is to support devices that can only send single varbind notifications. See etsysThreatNotificationConsolidatedData for more details. | 1.3.6.1.4.1.5624.1.2.45.1.0.3 | current |
| etsysThreatNotificationInformationMessage4 NOTIFICATION-TYPE An etsysThreatNotificationInformationMessage4 indicates that a potential threat has been identified. This trap should be generated when the device and interface of the threat is known, but the IP address of the source may or may not be known. (etsysThreatNotificationSenderName, etsysThreatNotificationInitiatorAddress and etsysThreatNotificationTargetAddress are optional objects) | 1.3.6.1.4.1.5624.1.2.45.1.0.4 | current |
| etsysThreatUndoNotificationMessage NOTIFICATION-TYPE An etsysThreatUndoNotificationMessage indicates that a potential threat that had been identified has been resolved. When this message is received, if a user was quarantined, the action should be undone. | 1.3.6.1.4.1.5624.1.2.45.1.0.5 | current |
| etsysThreatResponseNotificationMessage NOTIFICATION-TYPE An etsysThreatResponseNotificationMessage indicates that a potential threat that had been identified has been acted upon. When this message is received, a user was either quarantined, or the action was undone. | 1.3.6.1.4.1.5624.1.2.45.1.0.6 | current |
Conformance
| Name | OID | Status |
|---|---|---|
| etsysThreatNotificationMessage1SystemGroup OBJECT-GROUP A collection of objects required for etsysThreatNotificationMessage1 providing information about possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.1 | current |
| etsysThreatNotificationMessage2SystemGroup OBJECT-GROUP A collection of objects required for etsysThreatNotificationMessage2 providing information about possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.2 | current |
| etsysThreatNotificationMessage3SystemGroup OBJECT-GROUP A collection of objects required for etsysThreatNotificationMessage3 providing information about possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.3 | current |
| etsysThreatNotificationMessage1Group NOTIFICATION-GROUP A collection of notifications used to alert a management application of possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.4 | current |
| etsysThreatNotificationMessage2Group NOTIFICATION-GROUP A collection of notifications used to alert a management application of possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.5 | current |
| etsysThreatNotificationMessage3Group NOTIFICATION-GROUP A collection of notifications used to alert a management application of possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.6 | current |
| etsysThreatNotificationMessage4SystemGroup OBJECT-GROUP A collection of objects required for etsysThreatNotificationMessage4 providing information about possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.7 | current |
| etsysThreatNotificationMessage4Group NOTIFICATION-GROUP A collection of notifications used to alert a management application of possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.8 | current |
| etsysThreatUndoNotificationMessageSystemGroup OBJECT-GROUP A collection of objects required for etsysThreatUndoNotificationMessage providing information about possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.9 | current |
| etsysThreatUndoNotificationMessageGroup NOTIFICATION-GROUP A collection of notifications used to alert a management application of possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.10 | current |
| etsysThreatResponseNotificationMessageSystemGroup OBJECT-GROUP A collection of objects required for etsysThreatResponseNotificationMessage providing information about possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.11 | current |
| etsysThreatResponseNotificationMessageGroup NOTIFICATION-GROUP A collection of notifications used to alert a management application of possible threats on a network. | 1.3.6.1.4.1.5624.1.2.45.2.1.12 | current |
| etsysThreatNotificationCompliance MODULE-COMPLIANCE The compliance statement for devices that support threat notifications. | 1.3.6.1.4.1.5624.1.2.45.2.2.1 | current |