mibs/MIBS/trellix/TRELLIX-INTRUVERT-TC

-- *****************************************************************
-- TRELLIX CONFIDENTIAL
-- TRELLIX-INTRUVERT-TC:  
-- Trellix (Textual Conventions)
--
-- Copyright (c) 2022 MUSARUBRA US, LLC
-- All rights reserved.
-- 
-- *****************************************************************

TRELLIX-INTRUVERT-TC DEFINITIONS ::= BEGIN

IMPORTS
	MODULE-IDENTITY, Integer32
		FROM SNMPv2-SMI
	TEXTUAL-CONVENTION
		FROM SNMPv2-TC
	ivConventions
		FROM TRELLIX-INTRUVERT-SMI;

ivTextualConventions MODULE-IDENTITY
LAST-UPDATED "200707090000Z"
ORGANIZATION 
"MUSARUBRA US LLC"
CONTACT-INFO 
"Trellix Customer Service Department

Postal: 6220 American Center Drive
        San Jose CA 95002-2563
       

Tel: +1 800 338 8754

E-mail: support@mcafee.com"
DESCRIPTION 
"This module defines textual conventions used throughout the 
Trellix enterprise MIBs."
::= { ivConventions 1 }


TrellixEventCategory ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		""
	SYNTAX  INTEGER {
		other (0),
		equipment (1),
		commnunication (2),
		qos (3),
		environment (4),
		application (5)
	}


TrellixEventSeverity ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		""
	SYNTAX  INTEGER {
		unknown (0),
		inform (1),
		clear (2),
		warning (3),
		error (4),
		critical (5)
	}


TrellixFEType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Specify speed for Fast Ethernet ports.
		example: 10 or 100 Mbps"
	SYNTAX  INTEGER {
		other (0),
		ten-Mbps (1),
		hundred-Mbps (2),
		auto-negotiate (3)
	}


TrellixGEType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Specify speed for Gigabit Ethernet ports."
	SYNTAX  INTEGER {
		other (0),
		one-gbps (2),
		auto-negotiate (3)
	}


TrellixIDSAction ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"These specify IDS-specific actions on the management and sensor/analysis card.
		"
	SYNTAX  INTEGER {
		other (0),
		enable (1),
		disable (2),
		reset (3),
		sigupdate (4),
		swupdate (5),
		sensordown (6),
		certupdate (7),
		hitlessreboot (8)
	}


TrellixIDSActionResult ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Bitmap-encoded integer that indicates detailed results of an action"
	SYNTAX  Integer32 (0..255)


TrellixIDSActionStatus ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Status reflecting action outcome."
	SYNTAX  INTEGER {
		failed (0),
		succeeded (1),
		sigupdated (2),
		enabled (3),
		disabled (4)
	}


TrellixIDSCardType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Card type aplicable to Trellix IPS.
		Current support limted to
		- Management card 
		- Sensor Analysis card"
	SYNTAX  INTEGER {
		other (0),
		mgmt (1),
		sensor (2)
	}


TrellixIDSOperatingMode ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Operating mode for Trellix IPS Sensor
		
		inline-fail-open-passive: read and forward packets to destination. This 
				 will be fail-open (passive kit)
		monitor-dual-intf: monitor two interfaces using Tap
		monitor-single-intf: monitor span/hub
		inline-fail-close: Uses span dongle cables for the 10/100
				   uses external bypass switch for gigabit
                inline-fail-open-active:read and forward packets to destination. This
                          will be fail-open. This is available on M-series only.
		"
	SYNTAX  INTEGER {
		inline-fail-open-passive (1),
		monitor-dual-intf (2),
		monitor-single-intf (3),
		inline-fail-close (4),
		inline-fail-open-active (5)
	}


TrellixIDSPortType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
      "Indicates type of port. 
       gigabitEthernet supports only 1000Mbps, fastEthernet supports
       10/100 Mbps, copperGigabitEthernet supports 10/100/1000 Mbps and 
       tenGigabitEthernet supports only 10 Gbps."
	SYNTAX  INTEGER {
		other (0),
		gigabitEthernet (1),
		fastEthernet (2),
		copperGigabitEthernet (3),
		tenGigabitEthernet (4),
        	fortyGigabitEthernet (5), -- support in R-series only
        	vnic(6) -- support in V-series only
	}


TrellixIDSResponseMode ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		""
	SYNTAX  INTEGER {
		interace-port(0),
		response-port (1),
		management-port (2)
	}


TrellixProductType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		""
	SYNTAX  INTEGER {
		ids (0)
	}


TrellixTFTPAction ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		""
	SYNTAX  INTEGER {
		other (0),
		download-image (1),
		download-signature (2),
		upload-dos (3),
		upload-trace (4),
		download-dos (5),
		abort-transfer (6),
		download-sslcert (7),
		download-image-and-signature (8),
		download-mpecert (9),
    download-sgap-ssl-cert (10),
    upload-sgap-ssl-csr (11),
    upload-ibac-ad-file (12),
    download-ibac-ad-file (13),
    upload-sw-tlv-file (14),
    download-PacketCaptureFilter-file(15),
    upload-PacketCaptureFilter-file(16),
    download-geolocation-db-file (17),
    upload-PacketCapturePCAP-file(18),
    download-usrid-acl-file(19),
    download-bot-dat-file(20),
    download-ntba-ssl-cert-file(21),
    upload-dev-prof-file(22),
--	values 23 and 24 not used as NSM has reserved them for NTBA 
    download-matd-ssl-cert-file(25),
    download-ffp-bulk-update(28),
    download-zcenter-ssl-cert(33),
    download-gti-pc-ssl-cert(34),
    upload-suricata-failed-rules-file(35),
    upload-ca-sensor-csr (36),
    download-ca-sensor-cert (37),
	download-syslog-ssl-cert (38)
	}


TrellixTFTPFailedResult ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"This object defines reasons for TFTP failure. 
		Applicable only when the corresponding <TrellixTFTPStatus> is set to 'failed'."
	SYNTAX  INTEGER {
		other (0),
		invalidFileName (1),
		invalidFileType (2),
		cannotReachServer (3),
		noResponseFromServer (4),
		insufficientDiskSpace (5),
		decryptionError (6),
		accessViolation (7),
		fileAlreadyExists (8),
		channelOutOfSync (9),
		sensorNotInitialized (10),
		realtimeUpdateError (11),
		sigfile1OpenError (12),
		sigfile1StatError (13),
		sigfile1MemoryError (14),
		sigfile1ReadError (15),
		sigfile1NullError (16),
		sigfile1MD5Error (17),
		sigfile1InsufficientSpaceForTotalRules (18),
		sigfile1ConvertError (19),
		sigfile1SplitError (20),
		sigfile2OpenError (21),
		sigfile2StatError (22),
		sigfile2MemoryError (23),
		sigfile2ReadError (24),
		sigfile2NullError (25),
		sigfile2MD5Error (26),
		sigfile2InsufficientSpaceForTotalRules (27),
		sigfile2ConvertError (28),
		sigfile2SplitError (29),
		initIDConvertTablesError (30),
		sigfileMarkError (31),
		sigfileUndoMarkError (32),
		compareSigfilesError (33),
		updateBaseSigfileError (34),
		sensorRebootRequired (35),
		fileParseError (36),
		sigfile1FormatVersionError (37),
		sigfile2FormatVersionError (38),
		fileDoesNotExists (39),
		outOfMemoryError (40),
		transferAborted (41),
		internalApplyError (42),
		incrSigfileUnspportedError (53),
		incrSigfileFormatError (61),
		incrSigfileHasSigsetMismatchError (62),
		incrSigfileMergeError (63)
	}


TrellixTFTPFileType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		""
	SYNTAX  INTEGER {
		other (0),
		image (1),
		signature (2),
		trace (3),
		dos (4),
		configuration (5),
		sslcert (6),
		image-and-signature (7),
		mpecert (8)
	}


TrellixTFTPInProgressResult ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"This object defines user feedback during TFTP progress.
		Applicable only when corresponding <TrellixTFTPStatus> is set to 'inProgress'.
		Indicates percentage of TFTP up/download during the inProgress mode "
	SYNTAX  Integer32 (0..100)


TrellixTFTPStatus ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Indicates status of corresponding TFTP action <TrellixTFTPAction> request."
	SYNTAX  INTEGER {
		other (0),
		failed (1),
		inProgress (2),
		succeeded (3),
                dwnldFailed (11),
                applyFailed (12),
                dwnlding (21),
                dwnldingComplete (22),
                applying (23),
                applyingComplete (24)
	}

TrellixCUGEType ::= TEXTUAL-CONVENTION
	STATUS	current
	DESCRIPTION 
		"Specify speed for copper gigabit ethernet ports.
		example: 10 or 100 or 1000Mbps or auto"
	SYNTAX  INTEGER {
		other (0),
		ten-Mbps (1),
		hundred-Mbps (2),
		auto-negotiate (3),
		one-gbps (4)
	}

TrellixPortSpeed ::= TEXTUAL-CONVENTION
	STATUS  current
	DESCRIPTION
		"Specify speed for all types of ports.
		example: 10 or 100 or 1000Mbps or auto or 10Gbps"
	SYNTAX  INTEGER {
		other (0),
		fixed-ten-Mbps (1),
		fixed-hundred-Mbps (2),
		auto-negotiate-down-hundred-Mbps(3),
		fixed-one-Gbps(4),
		fixed-ten-Gbps(5), -- support in M-series only
		auto-negotiate-ten-Mbps (6),
		auto-negotiate-hundred-Mbps (7),
		auto-negotiate-one-Gbps(8),
		auto-negotiate-ten-Gbps(9), -- support in M-series only
		auto-negotiate-down-one-Gbps(10),
        fixed-forty-Gbps(11) -- support in R-series only
	}

TrellixPluggableModuleType ::= TEXTUAL-CONVENTION
	STATUS  current
	DESCRIPTION
		"Types of supported pluggable modules."
	SYNTAX  INTEGER {
		other (0),
    pluggable-module-qsfp (1), -- two 40 gig QSFP ports
    pluggable-module-sfp-plus (2), -- eight SFP+ ports
    pluggable-module-qsfp-4 (3), -- four port QSFP
    pluggable-module-sfp-plus-12 (4), -- 12 port SFP+ 
    pluggable-module-rj45-6 (5), -- 6 port RJ45
    pluggable-module-sfp-plus-pfo-4-sm (6), -- 4 port SFP+ BPFO single mode
    pluggable-module-sfp-plus-pfo-4-mm-50um (7), -- 4 port SFP+ BPFO multi mode 50um
    pluggable-module-sfp-plus-pfo-4-mm-62-5um (8), -- 4 port SFP+ BPFO multi mode 62.5um
    fixed-ports-sfp-12 (9), -- twelve SFP ports
    pluggable-module-rj45-4 (10) -- 4 port RJ45
	}

TrellixPortLinearIndex ::= TEXTUAL-CONVENTION
	STATUS  current
	DESCRIPTION 
		"This MIB object type indicates the Linear Index of the monitoring port. This index is 
		generated by the sensor appliance using the pair of slot index and the port index values.
		The other MIB tables would directly use this linear index, whereever applicable."
	SYNTAX  Integer32 (0..1024)


END