817 lines
20 KiB
Plaintext
817 lines
20 KiB
Plaintext
|
--
|
||
|
|
-- MODULE-IDENTITY
|
||
|
|
-- OrgName
|
||
|
|
-- Fortinet Technologies, Inc.
|
||
|
|
-- ContactInfo
|
||
|
|
-- Technical Support
|
||
|
|
-- e-mail: support@fortinet.com
|
||
|
|
-- http://www.fortinet.com
|
||
|
|
--
|
||
|
|
|
||
|
|
FORTINET-FORTIWEB-MIB DEFINITIONS ::= BEGIN
|
||
|
|
|
||
|
|
IMPORTS
|
||
|
|
fnSysSerial, fortinet
|
||
|
|
FROM FORTINET-CORE-MIB
|
||
|
|
MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP
|
||
|
|
FROM SNMPv2-CONF
|
||
|
|
Counter32, Gauge32, Integer32, MODULE-IDENTITY,
|
||
|
|
NOTIFICATION-TYPE, OBJECT-TYPE
|
||
|
|
FROM SNMPv2-SMI
|
||
|
|
sysName
|
||
|
|
FROM SNMPv2-MIB
|
||
|
|
DisplayString, TEXTUAL-CONVENTION
|
||
|
|
FROM SNMPv2-TC;
|
||
|
|
|
||
|
|
fnFortiWebMib MODULE-IDENTITY
|
||
|
|
LAST-UPDATED "201807130000Z"
|
||
|
|
ORGANIZATION
|
||
|
|
"Fortinet Technologies, Inc."
|
||
|
|
CONTACT-INFO
|
||
|
|
"
|
||
|
|
Technical Support
|
||
|
|
email: support@fortinet.com
|
||
|
|
http://www.fortinet.com"
|
||
|
|
DESCRIPTION
|
||
|
|
"MIB module for Fortinet FortiWeb devices"
|
||
|
|
REVISION "201807130000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwbDOCKER."
|
||
|
|
REVISION "201804040000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwbVBOX."
|
||
|
|
REVISION "201803210000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwbGCP."
|
||
|
|
REVISION "201711170000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwbKVMPAYG."
|
||
|
|
REVISION "201702130000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwb1000E."
|
||
|
|
REVISION "201612130000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwbPAYG."
|
||
|
|
REVISION "201610250000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwb2000E."
|
||
|
|
REVISION "201609130000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwb600D."
|
||
|
|
REVISION "201607010000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"fix syntax error"
|
||
|
|
REVISION "201512170000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwb3010E."
|
||
|
|
REVISION "201512160000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwb400D."
|
||
|
|
REVISION "201512030000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"add fwbAZURE."
|
||
|
|
REVISION "201510200000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"Modify model name from fwzxxx to fwbxxx."
|
||
|
|
REVISION "201507130000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"Adjust MIB tree."
|
||
|
|
REVISION "201003220000Z"
|
||
|
|
DESCRIPTION
|
||
|
|
"Initial version of FORTINET-FORTIWEB-MIB."
|
||
|
|
::= { fortinet 107 }
|
||
|
|
|
||
|
|
FwOpMode ::= TEXTUAL-CONVENTION
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"enumerated type for device operation modes"
|
||
|
|
SYNTAX INTEGER { inline(1), offline(2), transparent(3), wccp(4)}
|
||
|
|
|
||
|
|
FwHaMode ::= TEXTUAL-CONVENTION
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"enumerated type for HA cluster modes"
|
||
|
|
SYNTAX INTEGER { standalone(1), master(2),
|
||
|
|
slave(3) }
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwModel
|
||
|
|
--
|
||
|
|
fwModel OBJECT IDENTIFIER
|
||
|
|
::= { fnFortiWebMib 1 }
|
||
|
|
|
||
|
|
fwb400B OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 4002 }
|
||
|
|
|
||
|
|
fwb100D OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 1004 }
|
||
|
|
|
||
|
|
fwb400C OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 4003 }
|
||
|
|
|
||
|
|
fwb400D OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 4004 }
|
||
|
|
|
||
|
|
fwb600D OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 6004 }
|
||
|
|
|
||
|
|
fwb1000B OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 10002 }
|
||
|
|
|
||
|
|
fwb1000C OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 10003 }
|
||
|
|
|
||
|
|
fwb1000D OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 10004 }
|
||
|
|
|
||
|
|
fwb2000E OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 10005 }
|
||
|
|
|
||
|
|
fwb1000E OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 10006 }
|
||
|
|
|
||
|
|
fwb3000C OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 30003 }
|
||
|
|
|
||
|
|
fwb3000CFSX OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 30004 }
|
||
|
|
|
||
|
|
fwb3000D OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 30005 }
|
||
|
|
fwb3000DFSX OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 30006 }
|
||
|
|
|
||
|
|
fwb3000E OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 30007 }
|
||
|
|
fwb3010E OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 30008 }
|
||
|
|
|
||
|
|
fwb4000C OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 40003 }
|
||
|
|
fwb4000D OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 40004 }
|
||
|
|
fwb4000E OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 40005 }
|
||
|
|
|
||
|
|
fwbVM OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50001 }
|
||
|
|
|
||
|
|
fwbXENOPEN OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50002 }
|
||
|
|
fwbXENSERVER OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50003}
|
||
|
|
fwbXENAWS OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50004 }
|
||
|
|
fwbHYPERV OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50005 }
|
||
|
|
fwbKVM OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50006}
|
||
|
|
fwbAZURE OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50007}
|
||
|
|
fwbVMPAYG OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50008}
|
||
|
|
fwbKVMPAYG OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50009}
|
||
|
|
fwbGCP OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50010}
|
||
|
|
fwbVBOX OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50011}
|
||
|
|
fwbDOCKER OBJECT IDENTIFIER
|
||
|
|
::= { fwModel 50012}
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwSystem
|
||
|
|
--
|
||
|
|
|
||
|
|
fwSystem OBJECT IDENTIFIER
|
||
|
|
::= { fnFortiWebMib 2 }
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwSystem.fwSystemInfo
|
||
|
|
--
|
||
|
|
|
||
|
|
fwSystemInfo OBJECT IDENTIFIER
|
||
|
|
::= { fwSystem 1 }
|
||
|
|
|
||
|
|
|
||
|
|
fwSystemCPU OBJECT IDENTIFIER
|
||
|
|
::= { fwSystem 2 }
|
||
|
|
|
||
|
|
cPUNumber OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The number of CPU."
|
||
|
|
::= { fwSystemCPU 1 }
|
||
|
|
|
||
|
|
cPUTable OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF CPUEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"cpu"
|
||
|
|
::= { fwSystemCPU 2 }
|
||
|
|
|
||
|
|
cPUEntry OBJECT-TYPE
|
||
|
|
SYNTAX CPUEntry
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"CPU"
|
||
|
|
INDEX { cPUIndex }
|
||
|
|
::= { cPUTable 1 }
|
||
|
|
|
||
|
|
CPUEntry ::=
|
||
|
|
SEQUENCE {
|
||
|
|
cPUIndex
|
||
|
|
Integer32 ,
|
||
|
|
cPUusage
|
||
|
|
Integer32
|
||
|
|
}
|
||
|
|
|
||
|
|
cPUIndex OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (1..2147483647)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"A unique value for each CPU."
|
||
|
|
::= { cPUEntry 1 }
|
||
|
|
|
||
|
|
|
||
|
|
cPUusage OBJECT-TYPE
|
||
|
|
SYNTAX Integer32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
" CPU usage"
|
||
|
|
::= { cPUEntry 2 }
|
||
|
|
|
||
|
|
fwSysModel OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString (SIZE(0..128))
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"System Model of the device"
|
||
|
|
::= { fwSystemInfo 1 }
|
||
|
|
|
||
|
|
fwSysVersion OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString (SIZE(0..128))
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Firmware version of the device"
|
||
|
|
::= { fwSystemInfo 2 }
|
||
|
|
|
||
|
|
fwSysHaMode OBJECT-TYPE
|
||
|
|
SYNTAX FwHaMode
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"High-availability mode HA mode(Standalone, Master, Slave)"
|
||
|
|
::= { fwSystemInfo 3 }
|
||
|
|
|
||
|
|
fwSysOpMode OBJECT-TYPE
|
||
|
|
SYNTAX FwOpMode
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Operation mode of the device (Inline or Offlinet or Transparent or WCCP)"
|
||
|
|
::= { fwSystemInfo 4 }
|
||
|
|
|
||
|
|
fwSysCpuUsage OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32 (0..100)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Current CPU usage (percentage)"
|
||
|
|
::= { fwSystemInfo 5 }
|
||
|
|
|
||
|
|
fwSysCpuFreq OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Current CPU frequency (MHz)"
|
||
|
|
::= { fwSystemInfo 6 }
|
||
|
|
|
||
|
|
fwSysMemUsage OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32 (0..100)
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Current memory utilization (percentage)"
|
||
|
|
::= { fwSystemInfo 7 }
|
||
|
|
|
||
|
|
fwSysMemCapacity OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Total physical memory (RAM) installed (MB)"
|
||
|
|
::= { fwSystemInfo 8 }
|
||
|
|
|
||
|
|
fwSysDiskUsage OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Current hard disk usage rate, if disk is present"
|
||
|
|
::= { fwSystemInfo 9 }
|
||
|
|
|
||
|
|
fwSysDiskCapacity OBJECT-TYPE
|
||
|
|
SYNTAX Gauge32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Total hard disk capacity (MB), if disk is present"
|
||
|
|
::= { fwSystemInfo 10 }
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwProxy
|
||
|
|
--
|
||
|
|
|
||
|
|
fwProxy OBJECT IDENTIFIER
|
||
|
|
::= { fnFortiWebMib 3 }
|
||
|
|
|
||
|
|
fwProxyNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Policy number"
|
||
|
|
::= { fwProxy 1 }
|
||
|
|
|
||
|
|
fwPServerNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Physical server number"
|
||
|
|
::= { fwProxy 2 }
|
||
|
|
|
||
|
|
fwVServerNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Virtual server number"
|
||
|
|
::= { fwProxy 3 }
|
||
|
|
|
||
|
|
fwMonitorNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Monitor number"
|
||
|
|
::= { fwProxy 4 }
|
||
|
|
|
||
|
|
fwServiceNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Service number"
|
||
|
|
::= { fwProxy 5 }
|
||
|
|
|
||
|
|
fwPortSvrNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Protection server number"
|
||
|
|
::= { fwProxy 6 }
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwXMLProtection
|
||
|
|
--
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwWAFProtection
|
||
|
|
--
|
||
|
|
|
||
|
|
fwWAFProtection OBJECT IDENTIFIER
|
||
|
|
::= { fnFortiWebMib 4 }
|
||
|
|
|
||
|
|
fwWAFInputRuleNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF input rule number"
|
||
|
|
::= { fwWAFProtection 1 }
|
||
|
|
|
||
|
|
fwWAFParameterNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF paramater validation rules number"
|
||
|
|
::= { fwWAFProtection 2 }
|
||
|
|
|
||
|
|
fwWAFAccessNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF page access rule number"
|
||
|
|
::= { fwWAFProtection 3 }
|
||
|
|
|
||
|
|
fwWAFSvrPortNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF server protection number"
|
||
|
|
::= { fwWAFProtection 4 }
|
||
|
|
|
||
|
|
fwWAFStartPageNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF start page number"
|
||
|
|
::= { fwWAFProtection 5 }
|
||
|
|
|
||
|
|
--fwWAFBlacklistNumber OBJECT-TYPE
|
||
|
|
-- SYNTAX Counter32
|
||
|
|
-- MAX-ACCESS read-only
|
||
|
|
-- STATUS current
|
||
|
|
-- DESCRIPTION
|
||
|
|
-- "WAF black list number"
|
||
|
|
-- ::= { fwWAFProtection 6 }
|
||
|
|
|
||
|
|
--fwWAFWhitelistNumber OBJECT-TYPE
|
||
|
|
-- SYNTAX Counter32
|
||
|
|
-- MAX-ACCESS read-only
|
||
|
|
-- STATUS current
|
||
|
|
-- DESCRIPTION
|
||
|
|
-- "WAF white list number"
|
||
|
|
-- ::= { fwWAFProtection 7 }
|
||
|
|
|
||
|
|
fwWAFProfileNumber OBJECT-TYPE
|
||
|
|
SYNTAX Counter32
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF profile number"
|
||
|
|
::= { fwWAFProtection 6 }
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwTraps
|
||
|
|
--
|
||
|
|
fwTraps OBJECT IDENTIFIER
|
||
|
|
::= { fnFortiWebMib 10 }
|
||
|
|
|
||
|
|
fwTrapPrefix OBJECT IDENTIFIER
|
||
|
|
::= { fwTraps 0 }
|
||
|
|
--
|
||
|
|
-- add by xhwang begin
|
||
|
|
--
|
||
|
|
fnWafInfo OBJECT-TYPE
|
||
|
|
SYNTAX SEQUENCE OF FnWafInfoDetail
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
" Details of one fortiweb attack infomation."
|
||
|
|
::= { fwTraps 1}
|
||
|
|
|
||
|
|
fnWafInfoDetail OBJECT-TYPE
|
||
|
|
SYNTAX FnWafInfoDetail
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"An entry containing information applicable to an attack of fortiweb"
|
||
|
|
INDEX { fnWafIndex }
|
||
|
|
::= { fnWafInfo 1 }
|
||
|
|
|
||
|
|
FnWafInfoDetail ::= SEQUENCE {
|
||
|
|
fnWafIndex Integer32,
|
||
|
|
fnWafDate DisplayString,
|
||
|
|
fnWafTime DisplayString,
|
||
|
|
fnWafSrcIP DisplayString,
|
||
|
|
fnWafDstIP DisplayString,
|
||
|
|
fnWafSrcPort DisplayString,
|
||
|
|
fnWafDstPort DisplayString,
|
||
|
|
fnWafHost DisplayString,
|
||
|
|
fnWafURL DisplayString
|
||
|
|
}
|
||
|
|
fnWafIndex OBJECT-TYPE
|
||
|
|
SYNTAX Integer32 (1..2147483647)
|
||
|
|
MAX-ACCESS not-accessible
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"An index uniquely defining an attack within the fnWafInfo"
|
||
|
|
::= { fnWafInfoDetail 1 }
|
||
|
|
|
||
|
|
fnWafDate OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The date of attack happened ( yyyy-mm-dd)"
|
||
|
|
::= { fnWafInfoDetail 2 }
|
||
|
|
|
||
|
|
fnWafTime OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The time of attack happened ( hh:mm:ss)"
|
||
|
|
::= { fnWafInfoDetail 3 }
|
||
|
|
|
||
|
|
fnWafSrcIP OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"the source ip of the attack "
|
||
|
|
::= { fnWafInfoDetail 4 }
|
||
|
|
|
||
|
|
fnWafDstIP OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"the dest ip of the attack "
|
||
|
|
::= { fnWafInfoDetail 5 }
|
||
|
|
|
||
|
|
fnWafSrcPort OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"the source port of the attack "
|
||
|
|
::= { fnWafInfoDetail 6 }
|
||
|
|
|
||
|
|
fnWafDstPort OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"the dest port of the attack "
|
||
|
|
::= { fnWafInfoDetail 7 }
|
||
|
|
|
||
|
|
fnWafHost OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The host of http request"
|
||
|
|
::= { fnWafInfoDetail 8 }
|
||
|
|
|
||
|
|
fnWafURL OBJECT-TYPE
|
||
|
|
SYNTAX DisplayString
|
||
|
|
MAX-ACCESS read-only
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The URL of the http request "
|
||
|
|
::= { fnWafInfoDetail 9 }
|
||
|
|
--
|
||
|
|
-- add by xhwang end
|
||
|
|
--
|
||
|
|
fwTrapHaHBFail NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"HA Master detects Slave is offline"
|
||
|
|
::= { fwTrapPrefix 1 }
|
||
|
|
|
||
|
|
fwTrapModeChange NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"System run mode is changed(inline/offline/transparent change)"
|
||
|
|
::= { fwTrapPrefix 2 }
|
||
|
|
|
||
|
|
fwTrapPolicyStart NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Policy is started"
|
||
|
|
::= { fwTrapPrefix 3 }
|
||
|
|
|
||
|
|
fwTrapPolicyStop NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Policy is stopped"
|
||
|
|
::= { fwTrapPrefix 4 }
|
||
|
|
|
||
|
|
fwTrapPServerFailed NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Physical server is drop-line"
|
||
|
|
::= { fwTrapPrefix 5 }
|
||
|
|
|
||
|
|
fwTrapXMLIntrusionAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"XML Intrusion trap"
|
||
|
|
::= { fwTrapPrefix 10 }
|
||
|
|
|
||
|
|
fwTrapXMLSchemaAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"XML Schema trap"
|
||
|
|
::= { fwTrapPrefix 11 }
|
||
|
|
|
||
|
|
fwTrapXMLFilterAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"XML filterRule trap"
|
||
|
|
::= { fwTrapPrefix 12 }
|
||
|
|
|
||
|
|
fwTrapXMLSigEncAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"XML Signature/Encrypte trap"
|
||
|
|
::= { fwTrapPrefix 13 }
|
||
|
|
|
||
|
|
fwTrapXMLWSDLAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"XML WSDL check trap"
|
||
|
|
::= { fwTrapPrefix 14 }
|
||
|
|
|
||
|
|
fwTrapXMLSqlAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"XML SQL injection trap"
|
||
|
|
::= { fwTrapPrefix 15 }
|
||
|
|
|
||
|
|
fwTrapWAFAMethodAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Allow method trap"
|
||
|
|
::= { fwTrapPrefix 30 }
|
||
|
|
|
||
|
|
fwTrapWAFXSSAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF XSS trap"
|
||
|
|
::= { fwTrapPrefix 31 }
|
||
|
|
|
||
|
|
fwTrapWAFSqlAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF SQL injection trap"
|
||
|
|
::= { fwTrapPrefix 32 }
|
||
|
|
|
||
|
|
fwTrapWAFExploitAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Common Exploits trap"
|
||
|
|
::= { fwTrapPrefix 33 }
|
||
|
|
|
||
|
|
fwTrapWAFDisclosureAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Information Disclosure trap"
|
||
|
|
::= { fwTrapPrefix 34 }
|
||
|
|
|
||
|
|
fwTrapWAFAccessAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Access page rule trap"
|
||
|
|
::= { fwTrapPrefix 35 }
|
||
|
|
|
||
|
|
fwTrapWAFSPageAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Start page rule trap"
|
||
|
|
::= { fwTrapPrefix 36 }
|
||
|
|
|
||
|
|
fwTrapWAFPValidAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Parameter validation rule trap"
|
||
|
|
::= { fwTrapPrefix 37 }
|
||
|
|
|
||
|
|
fwTrapWAFBListAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Black list trap"
|
||
|
|
::= { fwTrapPrefix 38 }
|
||
|
|
|
||
|
|
fwTrapWAFBLoginAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Brute force login trap"
|
||
|
|
::= { fwTrapPrefix 39 }
|
||
|
|
|
||
|
|
fwTrapWAFRobotAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Robot control trap"
|
||
|
|
::= { fwTrapPrefix 40 }
|
||
|
|
|
||
|
|
fwTrapWAFHideFieldAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF hide field trap"
|
||
|
|
::= { fwTrapPrefix 41 }
|
||
|
|
|
||
|
|
fwTrapWAFUrlAccessAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF url access trap"
|
||
|
|
::= { fwTrapPrefix 42 }
|
||
|
|
fwTrapWAFBadRobotAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF Bad Robot control trap"
|
||
|
|
::= { fwTrapPrefix 43 }
|
||
|
|
fwTrapWAFSignatureAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF signature attack trap"
|
||
|
|
::= { fwTrapPrefix 44 }
|
||
|
|
fwTrapWAFWListAttack NOTIFICATION-TYPE
|
||
|
|
OBJECTS { fnSysSerial, sysName,fnWafInfoDetail }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"WAF white list trap"
|
||
|
|
::= { fwTrapPrefix 45 }
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
--
|
||
|
|
-- fortinet.fnFortiWebMib.fwMibConformance
|
||
|
|
--
|
||
|
|
fwMibConformance OBJECT IDENTIFIER
|
||
|
|
::= { fnFortiWebMib 100 }
|
||
|
|
|
||
|
|
fwTrapGroup NOTIFICATION-GROUP
|
||
|
|
NOTIFICATIONS { fwTrapHaHBFail, fwTrapModeChange,
|
||
|
|
fwTrapPolicyStart, fwTrapPolicyStop,
|
||
|
|
fwTrapPServerFailed, fwTrapXMLIntrusionAttack,
|
||
|
|
fwTrapXMLSchemaAttack, fwTrapXMLFilterAttack,
|
||
|
|
fwTrapXMLSigEncAttack, fwTrapXMLWSDLAttack,
|
||
|
|
fwTrapXMLSqlAttack, fwTrapWAFAMethodAttack,
|
||
|
|
fwTrapWAFXSSAttack, fwTrapWAFSqlAttack,
|
||
|
|
fwTrapWAFExploitAttack, fwTrapWAFDisclosureAttack,
|
||
|
|
fwTrapWAFAccessAttack, fwTrapWAFSPageAttack,
|
||
|
|
fwTrapWAFPValidAttack, fwTrapWAFBListAttack,
|
||
|
|
fwTrapWAFWListAttack, fwTrapWAFBLoginAttack,
|
||
|
|
fwTrapWAFRobotAttack }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Traps are intended for use."
|
||
|
|
::= { fwMibConformance 1 }
|
||
|
|
|
||
|
|
fwSystemObjectGroup OBJECT-GROUP
|
||
|
|
OBJECTS { fwSysModel, fwSysVersion,
|
||
|
|
fwSysHaMode, fwSysOpMode,
|
||
|
|
fwSysCpuUsage, fwSysCpuFreq,
|
||
|
|
fwSysMemUsage, fwSysMemCapacity,
|
||
|
|
fwSysDiskUsage, fwSysDiskCapacity }
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"Objects pertaining to the system status of the device."
|
||
|
|
::= { fwMibConformance 2 }
|
||
|
|
|
||
|
|
fwMibCompliance MODULE-COMPLIANCE
|
||
|
|
STATUS current
|
||
|
|
DESCRIPTION
|
||
|
|
"The compliance statement for the application MIB."
|
||
|
|
|
||
|
|
MODULE -- this module
|
||
|
|
|
||
|
|
GROUP fwTrapGroup
|
||
|
|
DESCRIPTION
|
||
|
|
"Traps are optional. Not all models support all traps. Consult product literature to see which traps are supported."
|
||
|
|
|
||
|
|
GROUP fwSystemObjectGroup
|
||
|
|
DESCRIPTION
|
||
|
|
"Object identifiers used in notifications. Objects are required if their containing trap is implemented."
|
||
|
|
|
||
|
|
::= { fwMibConformance 100 }
|
||
|
|
|
||
|
|
|
||
|
|
END -- end of module FORTINET-FORTIWEB-MIB.
|