Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

SNMP MIBS for IPS Blade

sk90860 Section VI-3 documents SNMP OIDs for many of the blades, but the IPS Blade is missing.  Is this an oversight or is there a reason why IPS was excluded?

0 Kudos
5 Replies
Highlighted
Admin
Admin

What precise information about IPS are you expecting to see over SNMP?
0 Kudos
Highlighted

I'd expect to see similar information as you'd see for the other blades, let's use Anti-Bot as an example.  What I'd really like to accomplish is to be able to alert when my IPS updates fail for some reason, so Update Status is most appropriate (failed,up-to-date,new,degrade,unknown).

Would be great to be able to pull something like Installation Date/Version that can be compared to see if they are more than a week out of date for instance.

0 Kudos
Highlighted
Admin
Admin

Up until fairly recently, IPS signatures had to be pushed from the management.
They still are in many configurations.
Might be better off querying this using REST API.
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-ips-status~v1.6
If you want to use SNMP you might have to create a custom MIB tied to the relevant CLI commands.
0 Kudos
Highlighted

Custom SNMP or REST API sound like two possible solutions that can be tested.  But going back to my original question, I'm guessing my answer is there is no SNMP MIBs for IPS as there is for the other blades such as Anti-Bot, Anti-Spam, Anti-Virus, App Control, etc.

0 Kudos
Highlighted
Admin
Admin

If you're not finding them in the MIB, then they don't exist 🙂
0 Kudos