CISCO-FIREWALL-MIB: View SNMP OID List / Download MIB

VENDOR: CISCO


 Home MIB: CISCO-FIREWALL-MIB
Download as:   
SNMPv2-CONF, IF-MIB, SNMP-FRAMEWORK-MIB, SNMPv2-SMI, CISCO-SMI, SNMPv2-TC

Download standard MIB format if you are planning to load a MIB file into some system (OS, Zabbix, PRTG ...) or view it with a MIB browser. CSV is more suitable for analyzing and viewing OID' and other MIB objects in excel. JSON and YAML formats are usually used in programing even though some systems can use MIB in YAML format (like Logstash).
Keep in mind that standard MIB files can be successfully loaded by systems and programs only if all the required MIB's from the "Imports" section are already loaded.
The tree-like SNMP object navigator requires no explanations because it is very simple to use. And if you stumbled on this MIB from Google note that you can always go back to the home page if you need to perform another MIB or OID lookup.


Object Name OID Type Access Info
 ciscoFirewallMIB 1.3.6.1.4.1.9.9.147
MIB module for monitoring Cisco Firewalls.
         ciscoFirewallMIBObjects 1.3.6.1.4.1.9.9.147.1
             cfwEvents 1.3.6.1.4.1.9.9.147.1.1
                 cfwBasicEvents 1.3.6.1.4.1.9.9.147.1.1.1
                     cfwBasicEventsTableLastRow 1.3.6.1.4.1.9.9.147.1.1.1.1 unsigned32 read-only
The index value of the most recently created row in the cfwBasicEventsTable. This number starts at 1 and increase by one with each new log entry. When this number wraps, all events are deleted.
                     cfwBasicEventsTable 1.3.6.1.4.1.9.9.147.1.1.1.2 no-access
Table of basic data for firewall events. The agent may choose to delete the instances of cfwBasicEventsEntry as required because of lack of memory. The oldest Events will be selected first for deletion.
                         cfwBasicEventsEntry 1.3.6.1.4.1.9.9.147.1.1.1.2.1 no-access
An entry in the table, containing general information about an event. This table will always be sparse, i.e., each row will instanciate only a subet of the columnar objects.
                             cfwBasicEventIndex 1.3.6.1.4.1.9.9.147.1.1.1.2.1.1 unsigned32 no-access
An index that uniquely identifies an entry in the log table. These indices are assigned beginning with 1 and increase by one with each new event logged.
                             cfwBasicEventTime 1.3.6.1.4.1.9.9.147.1.1.1.2.1.2 dateandtime read-only
The time that the event occurred.
                             cfwBasicSecurityEventType 1.3.6.1.4.1.9.9.147.1.1.1.2.1.3 securityevent read-only
The type of security-related event that this row contains. If the event is not security-related this object will not be instantiated.
                             cfwBasicContentInspEventType 1.3.6.1.4.1.9.9.147.1.1.1.2.1.4 contentinspectionevent read-only
The type of content inspection-related event that this row contains. If the event is not content inspection-related this object will not be instantiated.
                             cfwBasicConnectionEventType 1.3.6.1.4.1.9.9.147.1.1.1.2.1.5 connectionevent read-only
The type of connection-related event that this row contains. If the event is not connection-related this object will not be instantiated.
                             cfwBasicAccessEventType 1.3.6.1.4.1.9.9.147.1.1.1.2.1.6 accessevent read-only
The type of access-related event that this row contains. If the event is not access-related this object will not be instantiated.
                             cfwBasicAuthenticationEventType 1.3.6.1.4.1.9.9.147.1.1.1.2.1.7 authenticationevent read-only
The type of authentication-related event that this row contains. If the event is not authentication-related this object will not be instantiated.
                             cfwBasicGenericEventType 1.3.6.1.4.1.9.9.147.1.1.1.2.1.8 genericevent read-only
The type of generic event that this row contains. If the event does not fall into one of the other categories this object will be populated. Otherwise, this object will not be instantiated.
                             cfwBasicEventDescription 1.3.6.1.4.1.9.9.147.1.1.1.2.1.9 snmpadminstring read-only
A description of the event. The value of the object may be a zero-length string.
                             cfwBasicEventDetailsTableRow 1.3.6.1.4.1.9.9.147.1.1.1.2.1.10 rowpointer read-only
A pointer to a row in the table containing details about this event. Generally, the table will be the cfwNetEventsTable but a Cisco-defined table may also appear here. If there there is no more detailed information for this event the value of this object will have the value {0 0}.
                 cfwNetEvents 1.3.6.1.4.1.9.9.147.1.1.2
                     cfwNetEventsTableLastRow 1.3.6.1.4.1.9.9.147.1.1.2.1 unsigned32 read-only
The index value of the last row in the cfwNetEventsTable. This number starts at 1 and increase by one with each new log entry. When this number wraps, all events are deleted.
                     cfwNetEventsTable 1.3.6.1.4.1.9.9.147.1.1.2.2 no-access
Table of detailed data for network events. The agent may choose to delete the instances of cfwBasicEventsEntry as required because of lack of memory. It is an implementation-specific matter as to when this deletion may occur. It is recommended that the oldest log instances are deleted first.
                         cfwNetEventsEntry 1.3.6.1.4.1.9.9.147.1.1.2.2.1 no-access
An entry in the table, containing detailed information about an event. Note that this table may be sparse. If Network Address Translation is not enabled cfwNetEventInsideSrcIpAddress and cfwNetEventInsideDstIpAddress will not be instantiated in the row. If Port Address Translation is not enabled cfwNetEventInsideSrcIpPort and cfwNetEventInsideDstIpPort will not be instantiated in the row. Entries are added to this table at the same time that events are added to the cfwBasicEventsTable. These two tables may be configured to be different sizes so there may not be a one-to-one correspondence between rows in the two tables.
                             cfwNetEventIndex 1.3.6.1.4.1.9.9.147.1.1.2.2.1.1 unsigned32 no-access
An index that uniquely identifies an entry in the log table. These indices are assigned beginning with one and increase by one with each new log entry. When this number wraps, all events are deleted in order to allow the NMS to differentiate between old and new events.
                             cfwNetEventInterface 1.3.6.1.4.1.9.9.147.1.1.2.2.1.2 interfaceindexorzero read-only
The interface most closely associated with this event. For example, for an event that relates to the receipt of a packet, this object identifies the interface on which the packet was received. If there are multiple interfaces associated with an event, the interface most closely associated with the cause of the event will be used. For example, for an event for the setup of a TCP connection, the interface on the initiator's side of the connection would be preferred. If there is no associated interface, then this object has the value zero.
                             cfwNetEventSrcIpAddress 1.3.6.1.4.1.9.9.147.1.1.2.2.1.3 ipaddress read-only
Source IP address in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different source addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventInsideSrcIpAddress 1.3.6.1.4.1.9.9.147.1.1.2.2.1.4 ipaddress read-only
Source IP address after Network Address Translation has been applied. If NAT has not been applied to the source address in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different source addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventDstIpAddress 1.3.6.1.4.1.9.9.147.1.1.2.2.1.5 ipaddress read-only
Destination IP address in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different destination addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventInsideDstIpAddress 1.3.6.1.4.1.9.9.147.1.1.2.2.1.6 ipaddress read-only
Destination IP address after Network Address Translation has been applied. If NAT has not been applied to the destination address in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different destination addresses, this value may be zero or an address taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventSrcIpPort 1.3.6.1.4.1.9.9.147.1.1.2.2.1.7 integer read-only
Source UDP/TCP port in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different source ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventInsideSrcIpPort 1.3.6.1.4.1.9.9.147.1.1.2.2.1.8 integer read-only
Source UDP/TCP port after Port Address Translation has been applied. If PAT has not been applied to the source port in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different source ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventDstIpPort 1.3.6.1.4.1.9.9.147.1.1.2.2.1.9 integer read-only
Destination UDP/TCP port in the IP packet that caused the event. If there is no packet associated with the event this object has the value of zero. If the event is the result of multiple packets with different destination ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventInsideDstIpPort 1.3.6.1.4.1.9.9.147.1.1.2.2.1.10 integer read-only
Destination UDP/TCP port after Port Address Translation has been applied. If PAT has not been applied to the Destination port in this packet this object will not be instantiated, resulting in a sparse table. If the event is the result of multiple packets with different destination ports, this value may be zero or a port taken from an arbitrarily chosen packet in the sequence of packets causing the event.
                             cfwNetEventService 1.3.6.1.4.1.9.9.147.1.1.2.2.1.11 services read-only
The identification of the type of service involved with this event.
                             cfwNetEventServiceInformation 1.3.6.1.4.1.9.9.147.1.1.2.2.1.12 snmpadminstring read-only
Specific service information. This can be used to describe the particular service indentified by cfwNetEventService and can reflect whether the service is a local service or a gateway service. For example, if the value for cfwNetEventService is loginTelnet then the string provided might be 'local telnet'.
                             cfwNetEventIdentity 1.3.6.1.4.1.9.9.147.1.1.2.2.1.13 snmpadminstring read-only
This object will contain a description of the entity that caused the event. The entity could be a userid, username, processid or other identifier for the entity using the service. If there is no such information then this object will contain a zero-length string.
                             cfwNetEventDescription 1.3.6.1.4.1.9.9.147.1.1.2.2.1.14 snmpadminstring read-only
A detailed description of the event.
             cfwSystem 1.3.6.1.4.1.9.9.147.1.2
                 cfwStatus 1.3.6.1.4.1.9.9.147.1.2.1
                     cfwHardwareStatusTable 1.3.6.1.4.1.9.9.147.1.2.1.1 no-access
Table of firewall cfwHardwareStatusEntry entries.
                         cfwHardwareStatusEntry 1.3.6.1.4.1.9.9.147.1.2.1.1.1 no-access
An entry in the table, containing status information about a resource.
                             cfwHardwareType 1.3.6.1.4.1.9.9.147.1.2.1.1.1.1 hardware no-access
The hardware type for which this row provides status information.
                             cfwHardwareInformation 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2 snmpadminstring read-only
A detailed textual description of the resource identified by cfwHardwareType.
                             cfwHardwareStatusValue 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 hardwarestatus read-only
This object contains the current status of the resource.
                             cfwHardwareStatusDetail 1.3.6.1.4.1.9.9.147.1.2.1.1.1.4 snmpadminstring read-only
A detailed textual description of the current status of the resource which may provide a more specific description than cfwHardwareStatusValue.
                 cfwStatistics 1.3.6.1.4.1.9.9.147.1.2.2
                     cfwBufferStatsTable 1.3.6.1.4.1.9.9.147.1.2.2.1 no-access
A table conatining status information about a firewall's buffers.
                         cfwBufferStatsEntry 1.3.6.1.4.1.9.9.147.1.2.2.1.1 no-access
An entry in the table, containing status information about a particular statistic for the set of buffers of a particular size.
                             cfwBufferStatSize 1.3.6.1.4.1.9.9.147.1.2.2.1.1.1 unsigned32 no-access
This object contains the size of the set of buffers for which this row contains the statistics given by cfwBufferStatType.
                             cfwBufferStatType 1.3.6.1.4.1.9.9.147.1.2.2.1.1.2 resourcestatistics no-access
This object identifies the type of statistic given by this row for the particular set of buffers identified by cfwBufferStatSize.
                             cfwBufferStatInformation 1.3.6.1.4.1.9.9.147.1.2.2.1.1.3 snmpadminstring read-only
A detailed textual description of the statistic identified by cfwBufferStatType.
                             cfwBufferStatValue 1.3.6.1.4.1.9.9.147.1.2.2.1.1.4 gauge32 read-only
The value of the buffer statistic.
                     cfwConnectionStatTable 1.3.6.1.4.1.9.9.147.1.2.2.2 no-access
Table of firewall statistic instances.
                         cfwConnectionStatEntry 1.3.6.1.4.1.9.9.147.1.2.2.2.1 no-access
An entry in the table, containing information about a firewall statistic.
                             cfwConnectionStatService 1.3.6.1.4.1.9.9.147.1.2.2.2.1.1 services no-access
The identification of the type of connection providing statistics.
                             cfwConnectionStatType 1.3.6.1.4.1.9.9.147.1.2.2.2.1.2 connectionstat no-access
The state of the connections that this row contains statistics for.
                             cfwConnectionStatDescription 1.3.6.1.4.1.9.9.147.1.2.2.2.1.3 snmpadminstring read-only
A detailed textual description of this statistic.
                             cfwConnectionStatCount 1.3.6.1.4.1.9.9.147.1.2.2.2.1.4 counter32 read-only
This is an integer that contains the value of the resource statistic. If a type of 'gauge' is more appropriate this object will be omitted resulting in a sparse table.
                             cfwConnectionStatValue 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5 gauge32 read-only
This is an integer that contains the value of the resource statistic. If a type of 'counter' is more appropriate this object will be omitted resulting in a sparse table.
         ciscoFirewallMIBNotificationPrefix 1.3.6.1.4.1.9.9.147.2
             ciscoFirewallMIBNotifications 1.3.6.1.4.1.9.9.147.2.0
                 cfwSecurityNotification 1.3.6.1.4.1.9.9.147.2.0.2
This notification is used for events involving security events. The included objects provide more detailed information about the event.
                 cfwContentInspectNotification 1.3.6.1.4.1.9.9.147.2.0.3
This notification is used to notify the NMS of content inspection events. The included objects provide more detailed information about the event.
                 cfwConnNotification 1.3.6.1.4.1.9.9.147.2.0.4
This notification is used to notify the NMS of connection-oriented events. The included objects provide more detailed information about the event.
                 cfwAccessNotification 1.3.6.1.4.1.9.9.147.2.0.5
This notification is used to notify the NMS of access events. The included objects provide more detailed information about the event.
                 cfwAuthNotification 1.3.6.1.4.1.9.9.147.2.0.6
This notification is used to notify the NMS of authentication events. The included objects provide more detailed information about the event.
                 cfwGenericNotification 1.3.6.1.4.1.9.9.147.2.0.7
This notification is used to notify the NMS of events that do not fall into the other categories. The included objects provide more detailed information about the event.
         ciscoFirewallMIBConformance 1.3.6.1.4.1.9.9.147.3
             ciscoFirewallMIBCompliances 1.3.6.1.4.1.9.9.147.3.1
                 ciscoFirewallMIBCompliance 1.3.6.1.4.1.9.9.147.3.1.1
The compliance statement for entities which implement the Cisco FirewallMIB.
                 ciscoFirewallMIBComplianceRev1 1.3.6.1.4.1.9.9.147.3.1.2
The compliance statement for entities which implement the Cisco FirewallMIB.
             ciscoFirewallMIBGroups 1.3.6.1.4.1.9.9.147.3.2
                 ciscoFirewallMIBEventsGroup 1.3.6.1.4.1.9.9.147.3.2.1
Firewall events
                 ciscoFirewallMIBStatisticsGroup 1.3.6.1.4.1.9.9.147.3.2.2
Firewall statistics
                 ciscoFirewallMIBNotificationGroup 1.3.6.1.4.1.9.9.147.3.2.3
Firewall Notifications
                 ciscoFirewallMIBNotificationGroupRev1 1.3.6.1.4.1.9.9.147.3.2.4
Firewall Notifications