topic Re: SNMP monitoring of the IPS blade in Firewall and Security Management

SNMP monitoring of the IPS blade

SP4 — Mon, 20 Oct 2025 13:23:30 GMT

I'm trying to develop monitoring for our new Check Point firewalls and the OID for the IPS blade seems missing. sk90860 describes many OIDs for many software blades, and this question suggests using .1.3.6.1.4.1.2620.1.53 but that's not present when I try to snmpwalk it. Are there any other possibilities for monitoring the IPS blade using SNMP?

Re: SNMP monitoring of the IPS blade

Chris_Atkinson — Mon, 20 Oct 2025 15:40:51 GMT

Which model firewall and version/build/JHF is it currently installed with?

Re: SNMP monitoring of the IPS blade

PhoneBoy — Mon, 20 Oct 2025 16:03:54 GMT

Creating a custom OID with the exact information you're looking to monitor.
It's queryable through the API/CLI: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-ips-status~v2%20
Follow the steps in the Advanced SNMP configuration - Extend SNMP with shell script section of: https://support.checkpoint.com/results/sk/sk90860

That's basically what I said in that previous thread you linked.

Re: SNMP monitoring of the IPS blade

Tal_Paz-Fridman — Mon, 20 Oct 2025 16:42:28 GMT

Adding to what PhoneBoy wrote you might also want to use Gaia API to query the relevant counters in CPView for IPS (although there is more information for other blades)

https://sc1.checkpoint.com/documents/latest/GaiaAPIs/#cli/show-statistics-info~v1.8%20

https://sc1.checkpoint.com/documents/latest/GaiaAPIs/#cli/show-statistics-view-info~v1.8%20

Re: SNMP monitoring of the IPS blade

Lesley — Mon, 20 Oct 2025 20:51:45 GMT

Stolen screenshot from other checkmates topic (timothy)

Re: SNMP monitoring of the IPS blade

SP4 — Tue, 21 Oct 2025 07:16:51 GMT

Quantum Force 9700 security gateways with a few VSX firewalls running R82 jumbo hotfix take 39

Re: SNMP monitoring of the IPS blade

SP4 — Tue, 21 Oct 2025 07:17:33 GMT

Thank you, I'll suggest this as a possible solution

Re: SNMP monitoring of the IPS blade

Lesley — Tue, 21 Oct 2025 07:20:06 GMT

Ahhh VSX, then check this one out: https://support.checkpoint.com/results/sk/sk183374

Re: SNMP monitoring of the IPS blade

SP4 — Tue, 21 Oct 2025 07:31:32 GMT

After testing again, it turns out that .1.3.6.1.4.1.2620.1.53 is indeed present and working as intended.

I'm not sure what went wrong previously, I guess there was an error in the syntax for snmpwalk I was using combined with an old version of the MIB file. Thanks to everyone for responding

Re: SNMP monitoring of the IPS blade

the_rock — Wed, 22 Oct 2025 17:58:25 GMT

Thanks for the update!