SNMP OID for VPN certificate expiry?

[biskit]

Is there a way to monitor the VPN certificate expiry date via SNMP?

I've been searching for an OID to use in my monitoring platform and haven't found one yet 🙄

For bonus points, is there a way via SNMP to monitor the expiry date of InternalCA.p12 (as per sk158096)?  

Thanks,

Matt

[Chris_Atkinson]

Improving monitoring of certificates is planned.

In general you can otherwise extend SNMP with bash scripts (refer sk90860) to achieve in lieu of official OIDs, if SNMP options are a must. 

[Tal_Paz-Fridman · Accepted solution]

Here are the OIDs

stattest get 1.3.6.1.4.1.2620.1.1.101    - status_code

stattest get 1.3.6.1.4.1.2620.1.1.102    - short_description

stattest get 1.3.6.1.4.1.2620.1.1.103    - long_description

We'll add it to the SK

https://support.checkpoint.com/results/sk/sk178304

SmartConsole shows a warning or error icon near the Security Gateway / Cluster object about an expiring VPN certificate