- CheckMates
- :
- Products
- :
- Quantum
- :
- Threat Prevention
- :
- Re: SNMP MIBS for IPS Blade
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SNMP MIBS for IPS Blade
sk90860 Section VI-3 documents SNMP OIDs for many of the blades, but the IPS Blade is missing. Is this an oversight or is there a reason why IPS was excluded?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'd expect to see similar information as you'd see for the other blades, let's use Anti-Bot as an example. What I'd really like to accomplish is to be able to alert when my IPS updates fail for some reason, so Update Status is most appropriate (failed,up-to-date,new,degrade,unknown).
Would be great to be able to pull something like Installation Date/Version that can be compared to see if they are more than a week out of date for instance.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
They still are in many configurations.
Might be better off querying this using REST API.
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-ips-status~v1.6
If you want to use SNMP you might have to create a custom MIB tied to the relevant CLI commands.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Custom SNMP or REST API sound like two possible solutions that can be tested. But going back to my original question, I'm guessing my answer is there is no SNMP MIBs for IPS as there is for the other blades such as Anti-Bot, Anti-Spam, Anti-Virus, App Control, etc.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Just to follow up on this old thread it appears there are some queryable SNMP OIDs present for the IPS blade now, at least in R81.20. They may have been added in an earlier code release, but this is the first time I've noticed them:
Edit: Looking back through the MIB files it appears these were added in version R81.
CET (Europe) Timezone Course Scheduled for July 1-2
