SNMP MIBS for IPS Blade

[9eae3dd1-bcda-4]

sk90860 Section VI-3 documents SNMP OIDs for many of the blades, but the IPS Blade is missing.  Is this an oversight or is there a reason why IPS was excluded?

[PhoneBoy]

What precise information about IPS are you expecting to see over SNMP?

[9eae3dd1-bcda-4]

I'd expect to see similar information as you'd see for the other blades, let's use Anti-Bot as an example.  What I'd really like to accomplish is to be able to alert when my IPS updates fail for some reason, so Update Status is most appropriate (failed,up-to-date,new,degrade,unknown).

Would be great to be able to pull something like Installation Date/Version that can be compared to see if they are more than a week out of date for instance.

[PhoneBoy]

Up until fairly recently, IPS signatures had to be pushed from the management.
They still are in many configurations.
Might be better off querying this using REST API.
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-ips-status~v1.6
If you want to use SNMP you might have to create a custom MIB tied to the relevant CLI commands.

[9eae3dd1-bcda-4]

Custom SNMP or REST API sound like two possible solutions that can be tested.  But going back to my original question, I'm guessing my answer is there is no SNMP MIBs for IPS as there is for the other blades such as Anti-Bot, Anti-Spam, Anti-Virus, App Control, etc.

[PhoneBoy]

If you're not finding them in the MIB, then they don't exist 🙂

[Timothy_Hall]

Just to follow up on this old thread it appears there are some queryable SNMP OIDs present for the IPS blade now, at least in R81.20.  They may have been added in an earlier code release, but this is the first time I've noticed them:

Edit: Looking back through the MIB files it appears these were added in version R81.