2630 lines
86 KiB
Plaintext
Executable File
2630 lines
86 KiB
Plaintext
Executable File
-- ***********************************************
|
|
-- PAN-COMMON-MIB.my
|
|
--
|
|
-- MIB for the common MIB objects implemented by all
|
|
-- Palo Alto devices.
|
|
-- ***********************************************
|
|
|
|
PAN-COMMON-MIB DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, OBJECT-IDENTITY,
|
|
OBJECT-TYPE, NOTIFICATION-TYPE,
|
|
Integer32
|
|
FROM SNMPv2-SMI
|
|
-- MODULE-COMPLIANCE, OBJECT-GROUP
|
|
-- FROM SNMPv2-CONF
|
|
TEXTUAL-CONVENTION
|
|
FROM SNMPv2-TC
|
|
DisplayString, TruthValue, TimeStamp
|
|
FROM SNMPv2-TC
|
|
TcChassisType
|
|
FROM PAN-GLOBAL-TC
|
|
panModules, panCommonMib
|
|
FROM PAN-GLOBAL-REG;
|
|
|
|
panCommonMibModule MODULE-IDENTITY
|
|
LAST-UPDATED "201409040000Z"
|
|
ORGANIZATION "Palo Alto Networks"
|
|
CONTACT-INFO "
|
|
Customer Support
|
|
Palo Alto Networks
|
|
4401 Great America Pkwy
|
|
Santa Clara, CA 95054-1211
|
|
|
|
+1 866-898-9087
|
|
support at paloaltonetworks dot com"
|
|
|
|
DESCRIPTION "
|
|
A MIB module containing definitions of managed objects
|
|
implemented by all Palo Alto Networks' products."
|
|
REVISION "201406300000Z"
|
|
DESCRIPTION "
|
|
Rev 2.3
|
|
Added entries for Log Collector."
|
|
REVISION "201409040000Z"
|
|
DESCRIPTION "
|
|
Rev 2.2
|
|
Added entries for Wildfire content versions.
|
|
Added entry for new platform PA 3060."
|
|
REVISION "201403060000Z"
|
|
DESCRIPTION "
|
|
Rev 2.1
|
|
Fixed a capitalization error with PanVsysEntry."
|
|
REVISION "201303010000Z"
|
|
DESCRIPTION "
|
|
Rev 2.0
|
|
Updated with panGlobalProtect and panVsysTable."
|
|
REVISION "201102091610Z"
|
|
DESCRIPTION "
|
|
Rev 1.0
|
|
Initial version of MIB module PAN-COMMON-MIB."
|
|
|
|
::= { panModules 3 }
|
|
|
|
FloatValue ::= TEXTUAL-CONVENTION
|
|
DISPLAY-HINT "d-2"
|
|
STATUS current
|
|
DESCRIPTION
|
|
" This data type is used to represent Float values."
|
|
SYNTAX OCTET STRING (SIZE(0..64))
|
|
|
|
panCommonConfMib OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for MIB conformance statements."
|
|
::= { panCommonMib 1 }
|
|
|
|
panCommonObjs OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common MIB objects."
|
|
::= { panCommonMib 2 }
|
|
|
|
panCommonEvents OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common MIB events."
|
|
::= { panCommonMib 3 }
|
|
|
|
-- Top level groups
|
|
|
|
panSys OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common system objects."
|
|
::= { panCommonObjs 1 }
|
|
|
|
panChassis OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common chassis information."
|
|
::= { panCommonObjs 2 }
|
|
|
|
panSession OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common session information."
|
|
::= { panCommonObjs 3 }
|
|
|
|
panMgmt OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common Management plane information."
|
|
::= { panCommonObjs 4 }
|
|
|
|
panGlobalProtect OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common GlobalProtect information."
|
|
::= { panCommonObjs 5 }
|
|
|
|
panLogCollector OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common Log Collector information."
|
|
::= { panCommonObjs 6 }
|
|
|
|
panDeviceLogging OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common Device information."
|
|
::= { panCommonObjs 7 }
|
|
|
|
panSSLBroker OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree to capture ssl broker statistics."
|
|
::= { panCommonObjs 8 }
|
|
|
|
panGlobalCounters OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for common Global counters."
|
|
::= { panSys 19 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- System objects
|
|
|
|
panSysSwVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Full software version. The first two components of the full
|
|
version are the major and minor versions. The third component
|
|
indicates the maintenance release number and the fourth,
|
|
the build number."
|
|
::= { panSys 1 }
|
|
|
|
panSysHwVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Hardware version of the unit."
|
|
::= { panSys 2 }
|
|
|
|
panSysSerialNumber OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The serial number of the unit. If not available,
|
|
an empty string is returned."
|
|
::= { panSys 3 }
|
|
|
|
panSysTimeZoneOffset OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The offset in seconds from UTC of the system's time zone.
|
|
Values are negative for locations west of UTC and positive
|
|
for locations east of UTC."
|
|
::= { panSys 4 }
|
|
|
|
panSysDaylightSaving OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Whether daylight savings are in currently in effect for the
|
|
system's time zone."
|
|
::= { panSys 5 }
|
|
|
|
panSysVpnClientVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed VPN client package version. If
|
|
package is not installed, 0.0.0 is returned."
|
|
::= { panSys 6 }
|
|
|
|
panSysAppVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed application definition version. If
|
|
no application definition is found, 0 is returned."
|
|
::= { panSys 7 }
|
|
|
|
panSysAvVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed antivirus version. If no antivirus
|
|
is found, 0 is returned."
|
|
::= { panSys 8 }
|
|
|
|
panSysThreatVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed threat definition version. If no
|
|
threat definition is found, 0 is returned."
|
|
::= { panSys 9 }
|
|
|
|
panSysUrlFilteringVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed URL filtering version. If no URL
|
|
filtering is installed, 0 is returned."
|
|
::= { panSys 10 }
|
|
|
|
panSysHAState OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current high-availability state."
|
|
::= { panSys 11 }
|
|
|
|
panSysHAPeerState OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current peer high-availability state."
|
|
::= { panSys 12 }
|
|
|
|
panSysHAMode OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current high-availability mode (disabled,
|
|
active-passive, or active-active)."
|
|
::= { panSys 13 }
|
|
|
|
panSysUrlFilteringDatabase OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current installed URL filtering database
|
|
(surfcontrol, brightcloud, etc)"
|
|
::= { panSys 14 }
|
|
|
|
panSysGlobalProtectClientVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed global-protect client package version.
|
|
If package is not installed, 0.0.0 is returned."
|
|
::= { panSys 15 }
|
|
|
|
panSysOpswatDatafileVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed opswat database version.
|
|
If package is not installed, 0 is returned."
|
|
::= { panSys 16 }
|
|
|
|
panSysWildfireVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed wildfire content version. If no wildfire content
|
|
is found, 0 is returned."
|
|
::= { panSys 17 }
|
|
|
|
panSysWildfirePrivateCloudVersion OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed wildfire private cloud content version. If no wpc
|
|
is found, 0 is returned."
|
|
::= { panSys 18 }
|
|
|
|
panSysAppReleaseDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed application definition release date. If
|
|
no release date is found, unknown is returned."
|
|
::= { panSys 20 }
|
|
|
|
panSysThreatReleaseDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed threat release date. If
|
|
no release date is found, unknown is returned."
|
|
::= { panSys 21 }
|
|
|
|
panSysAvReleaseDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed antivirus release date. If
|
|
no release date is found, unknown is returned."
|
|
::= { panSys 22 }
|
|
|
|
panSysWfReleaseDate OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Currently installed WildFire release date. If
|
|
no release date is found, unknown is returned."
|
|
::= { panSys 23 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- Chassis
|
|
|
|
panChassisType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Chassis type for this Palo Alto device."
|
|
::= { panChassis 1 }
|
|
|
|
panMSeriesMode OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Series Mode for this Palo Alto device."
|
|
::= { panChassis 2 }
|
|
|
|
|
|
----------------------------------------------------------------------
|
|
-- Session
|
|
|
|
panSessionUtilization OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session table utilization percentage. Values should
|
|
be between 0 and 100."
|
|
::= { panSession 1 }
|
|
|
|
panSessionMax OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of sessions supported."
|
|
::= { panSession 2 }
|
|
|
|
panSessionActive OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of active sessions."
|
|
::= { panSession 3 }
|
|
|
|
panSessionActiveTcp OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of active TCP sessions."
|
|
::= { panSession 4 }
|
|
|
|
panSessionActiveUdp OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of active UDP sessions."
|
|
::= { panSession 5 }
|
|
|
|
panSessionActiveICMP OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of active ICMP sessions."
|
|
::= { panSession 6 }
|
|
|
|
panSessionActiveSslProxy OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of active SSL proxy sessions."
|
|
::= { panSession 7 }
|
|
|
|
panSessionSslProxyUtilization OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"SSL proxy Session utilization percentage. Values should
|
|
be between 0 and 100."
|
|
::= { panSession 8 }
|
|
|
|
panVsysTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanVsysEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"VSYS table"
|
|
::= { panSession 9 }
|
|
|
|
panZoneTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanZoneEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for the current active connectionsPerSecond (CPS) values
|
|
for each zone present."
|
|
::= { panSession 10 }
|
|
|
|
panIfTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanIfEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for the current active connectionsPerSecond (CPS) values
|
|
for each interface present."
|
|
::= { panSession 11 }
|
|
|
|
|
|
----------------------------------------------------------------------
|
|
-- VsysTable
|
|
|
|
panVsysEntry OBJECT-TYPE
|
|
SYNTAX PanVsysEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when the Vsys's are added to the
|
|
entVsysTable."
|
|
INDEX { panVsysId }
|
|
::= { panVsysTable 1 }
|
|
|
|
PanVsysEntry ::= SEQUENCE {
|
|
panVsysId Integer32,
|
|
panVsysName DisplayString,
|
|
panVsysSessionUtilizationPct Integer32,
|
|
panVsysActiveSessions Integer32,
|
|
panVsysMaxSessions Integer32,
|
|
panVsysActiveTcpCps Integer32,
|
|
panVsysActiveUdpCps Integer32,
|
|
panVsysActiveOtherIpCps Integer32
|
|
}
|
|
|
|
panVsysId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Vsys id"
|
|
::= { panVsysEntry 1 }
|
|
|
|
panVsysName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"User assigned vsys name (empty string if not available)"
|
|
::= { panVsysEntry 2 }
|
|
|
|
panVsysSessionUtilizationPct OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Vsys utilization percentage, if session limit is configured.
|
|
If session limit is not configured, this value is '0'"
|
|
::= { panVsysEntry 3 }
|
|
|
|
panVsysActiveSessions OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Active sessions on this Vsys"
|
|
::= { panVsysEntry 4 }
|
|
|
|
panVsysMaxSessions OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Max sessions on this Vsys, if session limit is configured.
|
|
If session limit is not configured, this value is '0'"
|
|
::= { panVsysEntry 5 }
|
|
|
|
panVsysActiveTcpCps OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active Tcp Connections per second for thie vSys."
|
|
::= { panVsysEntry 6 }
|
|
|
|
panVsysActiveUdpCps OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active Udp Connections per second for thie vSys."
|
|
::= { panVsysEntry 7 }
|
|
|
|
panVsysActiveOtherIpCps OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active Other IP Connections per second for thie vSys."
|
|
::= { panVsysEntry 8 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- Mgmt
|
|
|
|
panMgmtPanoramaConnected OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current Connection status to Panorama Server (connected, not-connected)"
|
|
::= { panMgmt 1 }
|
|
|
|
panMgmtPanorama2Connected OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Current Connection status to Panorama2 Server (connected, not-connected)"
|
|
::= { panMgmt 2 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- GlobalProtect
|
|
|
|
panGPGatewayUtilization OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"GlobalProtect gateway utilization"
|
|
::= { panGlobalProtect 1 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- GlobalProtect gateway utilization
|
|
|
|
panGPGWUtilizationPct OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"GlobalProtect Gateway utilization percentage"
|
|
::= { panGPGatewayUtilization 1 }
|
|
|
|
panGPGWUtilizationMaxTunnels OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Max tunnels allowed"
|
|
::= { panGPGatewayUtilization 2 }
|
|
|
|
panGPGWUtilizationActiveTunnels OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active tunnels"
|
|
::= { panGPGatewayUtilization 3 }
|
|
|
|
--------------------------------------------------------------------
|
|
-- Device Logging MIB
|
|
panDeviceLoggingLogRate OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for Device Logging Rate statistics."
|
|
::= { panDeviceLogging 1 }
|
|
|
|
panDeviceLoggingLogTypeStatTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanDeviceLoggingLogTypeStatEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for the statistics for different log types on the Device."
|
|
::= { panDeviceLogging 2 }
|
|
|
|
panDeviceLoggingLogUsageTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanDeviceLoggingLogUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for Log Usage and days retained for different log types on the Device.
|
|
Log Disk Usage is avaiable as MB (in use)."
|
|
::= { panDeviceLogging 3 }
|
|
|
|
panDeviceLoggingExtFwd OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for tracking dropped logs as ther are forwarded from device."
|
|
::= { panDeviceLogging 4 }
|
|
|
|
panDeviceLoggingCollectorConnectionTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanDeviceLoggingCollectorConnectionEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for tracking various log collection entities connected to device."
|
|
::= { panDeviceLogging 5 }
|
|
|
|
|
|
---------------------------------------------------------------------------
|
|
-- panSSLBroker
|
|
panSSLBrokerStatsTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanSSLBrokerStatsEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sub-tree for capturing ssl broker statistics and status."
|
|
::= { panSSLBroker 1 }
|
|
|
|
panSSLBrokerStatsEntry OBJECT-TYPE
|
|
SYNTAX PanSSLBrokerStatsEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entry of ssl broker statistics and status."
|
|
INDEX { index }
|
|
::= { panSSLBrokerStatsTable 1 }
|
|
|
|
PanSSLBrokerStatsEntry ::= SEQUENCE {
|
|
index Integer32,
|
|
chainName DisplayString,
|
|
avgLatency Integer32,
|
|
sessionCount Integer32
|
|
}
|
|
|
|
index OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Index of the ssl broker stats entry"
|
|
::= { panSSLBrokerStatsEntry 1 }
|
|
|
|
chainName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of ssl broker chain object"
|
|
::= { panSSLBrokerStatsEntry 2 }
|
|
|
|
avgLatency OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Average latency value"
|
|
::= { panSSLBrokerStatsEntry 3 }
|
|
|
|
sessionCount OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active sessions"
|
|
::= { panSSLBrokerStatsEntry 4 }
|
|
|
|
---------------------------------------------------------------------------
|
|
-- panDeviceLoggingLogRate
|
|
|
|
panDeviceIncomingLogRate OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The incoming rate in logs/s on the Device."
|
|
::= { panDeviceLoggingLogRate 1 }
|
|
|
|
panDeviceWriteLogRate OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The write rate in logs/s on the Device."
|
|
::= { panDeviceLoggingLogRate 2 }
|
|
|
|
---------------------------------------------------------------------------
|
|
-- panDeviceLoggingLogTypeStatTable
|
|
|
|
panDeviceLoggingLogTypeStatEntry OBJECT-TYPE
|
|
SYNTAX PanDeviceLoggingLogTypeStatEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when the panLcLogUsage are added to the panLcLogUsageTable."
|
|
INDEX { panDeviceLoggingDevice, panDeviceLoggingLogType }
|
|
::= { panDeviceLoggingLogTypeStatTable 1 }
|
|
|
|
PanDeviceLoggingLogTypeStatEntry ::= SEQUENCE {
|
|
panDeviceLoggingDevice DisplayString,
|
|
panDeviceLoggingDeviceIndex Integer32,
|
|
panDeviceLoggingLogType DisplayString,
|
|
panDeviceLoggingLogLastLogCreated TimeStamp,
|
|
panDeviceLoggingLogLastLogFwded TimeStamp,
|
|
panDeviceLoggingLogLastSeqNumberFwded Counter64,
|
|
panDeviceLoggingLogLastSeqNumberAck Counter64,
|
|
panDeviceLoggingLogTotalLogsFwded Counter64
|
|
}
|
|
|
|
panDeviceLoggingDevice OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Device Information (Name or Serial Number)."
|
|
::= { panDeviceLoggingLogTypeStatEntry 1 }
|
|
|
|
panDeviceLoggingDeviceIndex OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Index as mentioned in panDeviceLoggingCollectorConnection table."
|
|
::= { panDeviceLoggingLogTypeStatEntry 2 }
|
|
|
|
panDeviceLoggingLogType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Type of log."
|
|
::= { panDeviceLoggingLogTypeStatEntry 3 }
|
|
|
|
panDeviceLoggingLogLastLogCreated OBJECT-TYPE
|
|
SYNTAX TimeStamp
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Time of the last log creation."
|
|
::= { panDeviceLoggingLogTypeStatEntry 4 }
|
|
|
|
panDeviceLoggingLogLastLogFwded OBJECT-TYPE
|
|
SYNTAX TimeStamp
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Time at which last log was forwarded."
|
|
::= { panDeviceLoggingLogTypeStatEntry 5 }
|
|
|
|
panDeviceLoggingLogLastSeqNumberFwded OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sequence number of the last log that was forwarded."
|
|
::= { panDeviceLoggingLogTypeStatEntry 6 }
|
|
|
|
panDeviceLoggingLogLastSeqNumberAck OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sequence number of the last log that was acknowledged."
|
|
::= { panDeviceLoggingLogTypeStatEntry 7 }
|
|
|
|
panDeviceLoggingLogTotalLogsFwded OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total number of logs forwarded."
|
|
::= { panDeviceLoggingLogTypeStatEntry 8 }
|
|
|
|
--------------------------------------------------------------------
|
|
-- PanDeviceLoggingLogUsageEntry
|
|
|
|
panDeviceLoggingLogUsageEntry OBJECT-TYPE
|
|
SYNTAX PanDeviceLoggingLogUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when the panDeviceLoggingLogUsage are added to the panDeviceLoggingLogUsageTable."
|
|
INDEX { panDeviceLoggingLogUsageLogType }
|
|
::= { panDeviceLoggingLogUsageTable 1 }
|
|
|
|
PanDeviceLoggingLogUsageEntry ::= SEQUENCE {
|
|
panDeviceLoggingLogUsageLogType DisplayString,
|
|
panDeviceLoggingDiskUsageDiskSpace FloatValue,
|
|
panDeviceLoggingDiskUsageRetention Unsigned32,
|
|
panDeviceLoggingDiskQuotaPct FloatValue,
|
|
panDeviceLoggingDiskQuota FloatValue
|
|
}
|
|
|
|
panDeviceLoggingLogUsageLogType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log type for Device. "
|
|
::= { panDeviceLoggingLogUsageEntry 1 }
|
|
|
|
panDeviceLoggingDiskUsageDiskSpace OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Usage (MB) for particular log type for Device. "
|
|
::= { panDeviceLoggingLogUsageEntry 2 }
|
|
|
|
panDeviceLoggingDiskUsageRetention OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log Rentention for particular log type for Device. "
|
|
::= { panDeviceLoggingLogUsageEntry 3 }
|
|
|
|
panDeviceLoggingDiskQuotaPct OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Quota percentage for particular log type for Device. "
|
|
::= { panDeviceLoggingLogUsageEntry 4 }
|
|
|
|
panDeviceLoggingDiskQuota OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Quota for particular log type for Device. "
|
|
::= { panDeviceLoggingLogUsageEntry 5 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- panDeviceLoggingExtFwd
|
|
|
|
panDeviceLoggingExtFwdCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total count for logs forwarded."
|
|
::= { panDeviceLoggingExtFwd 1 }
|
|
|
|
panDeviceLoggingExtFwdQueueDrop OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for logs dropped due to queue being full."
|
|
::= { panDeviceLoggingExtFwd 2 }
|
|
|
|
panDeviceLoggingExtFwdStatsSendErr OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for logs discarded due to sending error."
|
|
::= { panDeviceLoggingExtFwd 3 }
|
|
|
|
panDeviceLoggingExtFwdStatsTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanDeviceLoggingExtFwdStatsEntry
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows the status of logs as they are forwarded via syslog, Traps, email and
|
|
http/https from this Device."
|
|
::= { panDeviceLoggingExtFwd 4 }
|
|
|
|
--------------------------------------------------------------------
|
|
-- panDeviceLoggingExtFwdStatsTable
|
|
panDeviceLoggingExtFwdStatsEntry OBJECT-TYPE
|
|
SYNTAX PanDeviceLoggingExtFwdStatsEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panDeviceLoggingExtFwdStats are added to panDeviceLoggingExtFwdStatsTable."
|
|
INDEX { panDeviceLoggingExtFwdStatsTableType }
|
|
::= { panDeviceLoggingExtFwdStatsTable 1 }
|
|
|
|
PanDeviceLoggingExtFwdStatsEntry ::= SEQUENCE {
|
|
panDeviceLoggingExtFwdStatsTableType DisplayString,
|
|
panDeviceLoggingExtFwdStatsTableEnqueueCount Counter64,
|
|
panDeviceLoggingExtFwdStatsTableSendCount Counter64,
|
|
panDeviceLoggingExtFwdStatsTableDropCount Counter64,
|
|
panDeviceLoggingExtFwdStatsTableQueueDepth Counter64,
|
|
panDeviceLoggingExtFwdStatsTable1minAvgSendRate Unsigned32
|
|
}
|
|
|
|
panDeviceLoggingExtFwdStatsTableType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of method used to forward logs."
|
|
::= { panDeviceLoggingExtFwdStatsEntry 1 }
|
|
|
|
panDeviceLoggingExtFwdStatsTableEnqueueCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for number of logs enqueued."
|
|
::= { panDeviceLoggingExtFwdStatsEntry 2 }
|
|
|
|
panDeviceLoggingExtFwdStatsTableSendCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for number of logs sent."
|
|
::= { panDeviceLoggingExtFwdStatsEntry 3 }
|
|
|
|
panDeviceLoggingExtFwdStatsTableDropCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for number of logs dropped."
|
|
::= { panDeviceLoggingExtFwdStatsEntry 4 }
|
|
|
|
panDeviceLoggingExtFwdStatsTableQueueDepth OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for depth of queue."
|
|
::= { panDeviceLoggingExtFwdStatsEntry 5 }
|
|
|
|
panDeviceLoggingExtFwdStatsTable1minAvgSendRate OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for average send rate over 1 minute interval."
|
|
::= { panDeviceLoggingExtFwdStatsEntry 6 }
|
|
|
|
-------------------------------------------------------------------
|
|
-- panDeviceLoggingCollectorConnectionTable
|
|
|
|
panDeviceLoggingCollectorConnectionEntry OBJECT-TYPE
|
|
SYNTAX PanDeviceLoggingCollectorConnectionEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when the panDeviceLogging are added to the panDeviceLoggingCollectorConnectionTable."
|
|
INDEX { panDeviceLoggingCollectorConnectionIP }
|
|
::= { panDeviceLoggingCollectorConnectionTable 1 }
|
|
|
|
PanDeviceLoggingCollectorConnectionEntry ::= SEQUENCE {
|
|
panDeviceLoggingCollectorConnectionType DisplayString,
|
|
panDeviceLoggingCollectorConnectionIP DisplayString,
|
|
panDeviceLoggingCollectorConnectionHostname DisplayString,
|
|
panDeviceLoggingCollectorConnectionStatus DisplayString
|
|
}
|
|
|
|
panDeviceLoggingCollectorConnectionType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Type of log collection entity (CMS/LC)."
|
|
::= { panDeviceLoggingCollectorConnectionEntry 1 }
|
|
|
|
panDeviceLoggingCollectorConnectionIP OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP of log collection entity (CMS/LC) for non-7K and Gryphon.
|
|
Will display connection ID for 7K and Gryphon."
|
|
::= { panDeviceLoggingCollectorConnectionEntry 2 }
|
|
|
|
panDeviceLoggingCollectorConnectionHostname OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Hostname of log collection entity (CMS/LC)."
|
|
::= { panDeviceLoggingCollectorConnectionEntry 3 }
|
|
|
|
panDeviceLoggingCollectorConnectionStatus OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Connection status of log collection entity (CMS/LC)."
|
|
::= { panDeviceLoggingCollectorConnectionEntry 4 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- LogCollector
|
|
|
|
panLcStat OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for the Log collection statistics."
|
|
::= { panLogCollector 1 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- LogCollector Stats
|
|
|
|
panLcLogRate OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The write rate in logs/s on the Log Collection"
|
|
::= { panLcStat 1 }
|
|
|
|
panLcLogDuration OBJECT-IDENTITY
|
|
STATUS deprecated
|
|
DESCRIPTION "
|
|
Sub-tree for the Log Duration on the Log Collector. Log
|
|
Duration is Expressed in Days of storage."
|
|
::= { panLcStat 2 }
|
|
|
|
panLcDiskUsageTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLcDiskUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS deprecated
|
|
DESCRIPTION "
|
|
Sub-tree for the Log Disk Usage on the Log Collector. Log
|
|
Disk Usage is available as MB in use."
|
|
::= { panLcStat 3 }
|
|
|
|
panLcLogUsageTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLcLogUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for the Log Usage and data retention on the Log Collector(non localDB).
|
|
Log Disk Usage is available as MB in use."
|
|
::= { panLcStat 4 }
|
|
|
|
panLocalLogUsageTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLocalLogUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for the Log Usage and data retention on the Log Collector(localDB).
|
|
Log Disk Usage is available as MB in use."
|
|
::= { panLcStat 5 }
|
|
|
|
panLcDiskIOPSTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLcDiskIOPSEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Sub-tree for Log Disk I/O throughput on the Log Collector and Panorama."
|
|
::= { panLcStat 6 }
|
|
|
|
panLcLogDurationTraffic OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the traffic logs on the Log Collector"
|
|
::= { panLcLogDuration 1 }
|
|
|
|
panLcLogDurationConfig OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the config logs on the Log Collector"
|
|
::= { panLcLogDuration 2 }
|
|
|
|
panLcLogDurationSystem OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the system logs on the Log Collector"
|
|
::= { panLcLogDuration 3 }
|
|
|
|
panLcLogDurationThreat OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the threat logs on the Log Collector"
|
|
::= { panLcLogDuration 4 }
|
|
|
|
panLcLogDurationAppstat OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the appstat logs on the Log Collector"
|
|
::= { panLcLogDuration 5 }
|
|
|
|
panLcLogDurationTrsum OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the trsum logs on the Log Collector"
|
|
::= { panLcLogDuration 6 }
|
|
|
|
panLcLogDurationThsum OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the thsum logs on the Log Collector"
|
|
::= { panLcLogDuration 7 }
|
|
|
|
panLcLogDurationEvent OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the event logs on the Log Collector"
|
|
::= { panLcLogDuration 8 }
|
|
|
|
panLcLogDurationAlarm OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the alarm logs on the Log Collector"
|
|
::= { panLcLogDuration 9 }
|
|
|
|
panLcLogDurationHipmatch OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the hipmatch logs on the Log Collector"
|
|
::= { panLcLogDuration 10 }
|
|
|
|
panLcLogDurationUserid OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log duration (in days) for the userid logs on the Log Collector"
|
|
::= { panLcLogDuration 11 }
|
|
|
|
panLcDiskUsageEntry OBJECT-TYPE
|
|
SYNTAX PanLcDiskUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"Entries are created when the panLcDiskUsage are added to the
|
|
panLcDiskUsageTable."
|
|
INDEX { panLcDiskUsageId }
|
|
::= { panLcDiskUsageTable 1 }
|
|
|
|
PanLcDiskUsageEntry ::= SEQUENCE {
|
|
panLcDiskUsageId Integer32,
|
|
panLcDiskUsage Unsigned32
|
|
}
|
|
|
|
panLocalLogUsageEntry OBJECT-TYPE
|
|
SYNTAX PanLocalLogUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when the panLocalLogUsage are added to the panLocalLogUsageTable."
|
|
INDEX { panLcLogType }
|
|
::= { panLocalLogUsageTable 1 }
|
|
|
|
PanLocalLogUsageEntry ::= SEQUENCE {
|
|
panLocalLogType DisplayString,
|
|
panLocalDiskUsageDiskSpace FloatValue,
|
|
panLocalDiskUsageRetention Unsigned32,
|
|
panLocalDiskQuota FloatValue,
|
|
panLocalDiskQuotaPct FloatValue
|
|
}
|
|
|
|
panLocalLogType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log type for Log Collector. "
|
|
::= { panLocalLogUsageEntry 1 }
|
|
|
|
panLocalDiskUsageDiskSpace OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Usage (in MB) for particular log type for Log Collector. "
|
|
::= { panLocalLogUsageEntry 2 }
|
|
|
|
panLocalDiskUsageRetention OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log Rentention for particular log type for Log Collector. "
|
|
::= { panLocalLogUsageEntry 3 }
|
|
|
|
panLocalDiskQuota OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Quota (in MB) for particular log type for Log Collector. "
|
|
::= { panLocalLogUsageEntry 4 }
|
|
|
|
panLocalDiskQuotaPct OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Quota Percentage for particular log type for Log Collector. "
|
|
::= { panLocalLogUsageEntry 5 }
|
|
|
|
|
|
panLcDiskIOPSEntry OBJECT-TYPE
|
|
SYNTAX PanLcDiskIOPSEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panLcDiskIOPSEntry are added to the panLcDiskIOPSTable."
|
|
INDEX { panLcDiskIOPSId }
|
|
::= { panLcDiskIOPSTable 1 }
|
|
|
|
PanLcDiskIOPSEntry ::= SEQUENCE {
|
|
panLcDiskIOPSId DisplayString,
|
|
panLcDiskIORead5min Counter64,
|
|
panLcDiskIOWrite5min Counter64
|
|
}
|
|
|
|
panLcDiskIOPSId OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk number for Log Collector or Panorama. "
|
|
::= { panLcDiskIOPSEntry 1 }
|
|
|
|
panLcDiskIORead5min OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk read rate over a span of 5 minute interval."
|
|
::= { panLcDiskIOPSEntry 2 }
|
|
|
|
panLcDiskIOWrite5min OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk write rate over a span of 5 minute interval."
|
|
::= { panLcDiskIOPSEntry 3 }
|
|
|
|
panLcLogUsageEntry OBJECT-TYPE
|
|
SYNTAX PanLcLogUsageEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when the panLcLogUsage are added to the panLcLogUsageTable."
|
|
INDEX { panLcLogType }
|
|
::= { panLcLogUsageTable 1 }
|
|
|
|
PanLcLogUsageEntry ::= SEQUENCE {
|
|
panLcLogType DisplayString,
|
|
panLcDiskUsageDiskSpacePct FloatValue,
|
|
panLcDiskUsageRetention Unsigned32,
|
|
panLcDiskQuotaPct FloatValue
|
|
}
|
|
|
|
panLcLogType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log type for Log Collector. "
|
|
::= { panLcLogUsageEntry 1 }
|
|
|
|
panLcDiskUsageDiskSpacePct OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Usage Percentage for particular log type for Log Collector
|
|
aggregated over all disks. "
|
|
::= { panLcLogUsageEntry 2 }
|
|
|
|
panLcDiskUsageRetention OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log Rentention for particular log type for Log Collector. "
|
|
::= { panLcLogUsageEntry 3 }
|
|
|
|
panLcDiskQuotaPct OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Disk Quota Percentage for particular log type for Log Collector
|
|
aggregated over all disks. "
|
|
::= { panLcLogUsageEntry 4 }
|
|
|
|
panLcDiskUsageId OBJECT-TYPE
|
|
SYNTAX Integer32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log disk id"
|
|
::= { panLcDiskUsageEntry 1 }
|
|
|
|
panLcDiskUsage OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS deprecated
|
|
DESCRIPTION
|
|
"The Log disk usage on the Log Collector"
|
|
::= { panLcDiskUsageEntry 2 }
|
|
|
|
panLcIsRedundancyMember OBJECT-TYPE
|
|
SYNTAX TruthValue
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"True value indicates this Log Collector is part of a Collector Group with Redundancy is enabled"
|
|
::= { panLogCollector 2 }
|
|
|
|
panLcLogFwdStatsTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLcLogFwdStatsEntry
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows the status of logs as they are forwarded via syslog, Traps, email and
|
|
http/https from this Log Collector."
|
|
::= { panLogCollector 3 }
|
|
------------------------------------------------------------------
|
|
-- panLcLogFwdStatsTable
|
|
|
|
panLcLogFwdStatsEntry OBJECT-TYPE
|
|
SYNTAX PanLcLogFwdStatsEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panLcLogFwdStats are added to panLcLogFwdStatsTable."
|
|
INDEX { panLcLogFwdStatsTableType }
|
|
::= { panLcLogFwdStatsTable 1 }
|
|
|
|
PanLcLogFwdStatsEntry ::= SEQUENCE {
|
|
panLcLogFwdStatsTableType DisplayString,
|
|
panLcLogFwdStatsTableEnqueueCount Counter64,
|
|
panLcLogFwdStatsTableSendCount Counter64,
|
|
panLcLogFwdStatsTableDropCount Counter64,
|
|
panLcLogFwdStatsTableQueueDepth Counter64
|
|
}
|
|
|
|
panLcLogFwdStatsTableType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of method used to forward logs."
|
|
::= { panLcLogFwdStatsEntry 1 }
|
|
|
|
panLcLogFwdStatsTableEnqueueCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for number of logs enqueued."
|
|
::= { panLcLogFwdStatsEntry 2 }
|
|
|
|
panLcLogFwdStatsTableSendCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for number of logs sent."
|
|
::= { panLcLogFwdStatsEntry 3 }
|
|
|
|
panLcLogFwdStatsTableDropCount OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for number of logs dropped."
|
|
::= { panLcLogFwdStatsEntry 4 }
|
|
|
|
panLcLogFwdStatsTableQueueDepth OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Counter for depth of queue."
|
|
::= { panLcLogFwdStatsEntry 5 }
|
|
|
|
-- panLcLoggingConnectedDeviceTable
|
|
|
|
panLcLoggingConnectedDeviceTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLcLoggingConnectedDeviceEntry
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows the details of all devices logging to this Log Collector."
|
|
::= { panLogCollector 4 }
|
|
|
|
panLcLoggingConnectedDeviceEntry OBJECT-TYPE
|
|
SYNTAX PanLcLoggingConnectedDeviceEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panLcLoggingConnectedDevice are added to panLcLoggingConnectedDeviceTable."
|
|
INDEX { panLcLoggingConnectedDeviceConnectionId }
|
|
::= { panLcLoggingConnectedDeviceTable 1 }
|
|
|
|
PanLcLoggingConnectedDeviceEntry ::= SEQUENCE {
|
|
panLcLoggingConnectedDeviceName DisplayString,
|
|
panLcLoggingConnectedDeviceConnectionId DisplayString,
|
|
panLcLoggingConnectedIdLogRate Unsigned32
|
|
}
|
|
|
|
panLcLoggingConnectedDeviceName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Name of the device being polled."
|
|
::= { panLcLoggingConnectedDeviceEntry 1 }
|
|
|
|
panLcLoggingConnectedDeviceConnectionId OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Connection id of the device being polled."
|
|
::= { panLcLoggingConnectedDeviceEntry 2 }
|
|
|
|
panLcLoggingConnectedIdLogRate OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Logging rate for the connection."
|
|
::= { panLcLoggingConnectedDeviceEntry 3 }
|
|
|
|
-- panLcLoggingDeviceTable
|
|
|
|
panLcLoggingDeviceTable OBJECT-TYPE
|
|
SYNTAX SEQUENCE OF PanLcLoggingDeviceEntry
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This table shows the details of logs forwarded by devices logging to this Log Collector."
|
|
::= { panLogCollector 5 }
|
|
|
|
panLcLoggingDeviceEntry OBJECT-TYPE
|
|
SYNTAX PanLcLoggingDeviceEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panLcLoggingDevice are added to panLcLoggingDeviceTable."
|
|
INDEX { panLcLoggingDeviceConnectionId,
|
|
panLcLoggingLogType }
|
|
::= { panLcLoggingDeviceTable 1 }
|
|
|
|
PanLcLoggingDeviceEntry ::= SEQUENCE {
|
|
panLcLoggingDeviceConnectionId DisplayString,
|
|
panLcLoggingLogType DisplayString,
|
|
panLcLogTypeLastLogRecd TimeStamp,
|
|
panLcLogTypeLastSeqNumRecd Counter64,
|
|
panLcLogTypeLastLogGen TimeStamp
|
|
}
|
|
|
|
panLcLoggingDeviceConnectionId OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Connection id of the device being polled."
|
|
::= { panLcLoggingDeviceEntry 1 }
|
|
|
|
panLcLoggingLogType OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Log Type of the log being polled."
|
|
::= { panLcLoggingDeviceEntry 2 }
|
|
|
|
panLcLogTypeLastLogRecd OBJECT-TYPE
|
|
SYNTAX TimeStamp
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Time at which the last log was received."
|
|
::= { panLcLoggingDeviceEntry 3 }
|
|
|
|
panLcLogTypeLastSeqNumRecd OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Last sequence number received for a type of log."
|
|
::= { panLcLoggingDeviceEntry 4 }
|
|
|
|
panLcLogTypeLastLogGen OBJECT-TYPE
|
|
SYNTAX TimeStamp
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Time at which the last log was generated."
|
|
::= { panLcLoggingDeviceEntry 5 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- Events
|
|
|
|
panCommonEventObjs OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Branch for objects meant only to be sent in event varbinds."
|
|
::= { panCommonEvents 1 }
|
|
|
|
panCommonEventEvents OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Branch for the events themselves."
|
|
::= { panCommonEvents 2 }
|
|
|
|
panCommonEventEventsV2 OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION "
|
|
Branch for SNMPv2 events. The OIDs for SNMPv2 events should
|
|
have a zero as the next-to-last sub-identifier (as specified
|
|
in RFC1902)."
|
|
::= { panCommonEventEvents 0 }
|
|
|
|
-- Objects sent only in events
|
|
|
|
panCommonEventDescr OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS accessible-for-notify
|
|
STATUS current
|
|
DESCRIPTION
|
|
"String that provides a textual description of the event."
|
|
::= { panCommonEventObjs 1 }
|
|
|
|
-- Event descriptions
|
|
|
|
panCommonEventLog NOTIFICATION-TYPE
|
|
OBJECTS { panCommonEventDescr }
|
|
STATUS current
|
|
DESCRIPTION
|
|
"A config/system/firewall/threat log"
|
|
::= { panCommonEventEventsV2 1 }
|
|
|
|
----------------------------------------------------------------------
|
|
-- GlobalCounters
|
|
|
|
panAhoSw OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total usage of software for AHO"
|
|
::= { panGlobalCounters 1 }
|
|
|
|
panDfaSw OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total number of dfa match using software"
|
|
::= { panGlobalCounters 2 }
|
|
|
|
panFlowHostServiceAllow OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Device management session allowed"
|
|
::= { panGlobalCounters 3 }
|
|
|
|
panHaPathmonSent OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"HA path-monitoring packets sent"
|
|
::= { panGlobalCounters 4 }
|
|
|
|
panAhoFpga OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total requests to FPGA for AHO"
|
|
::= { panGlobalCounters 5 }
|
|
|
|
panDfaFpga OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The total requests to FPGA for DFA"
|
|
::= { panGlobalCounters 6 }
|
|
|
|
panFpgaPkt OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"The packets held because of requests to FPGA"
|
|
::= { panGlobalCounters 7 }
|
|
|
|
panGlobalCountersDOSCounters OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sub-tree for Global DOS counters"
|
|
::= { panGlobalCounters 8 }
|
|
|
|
panGlobalCountersDropCounters OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sub-tree for Global Drop counters"
|
|
::= { panGlobalCounters 9 }
|
|
|
|
panGlobalCountersIPFragmentationCounters OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sub-tree for Global IPFragmentation counters"
|
|
::= { panGlobalCounters 10 }
|
|
|
|
panGlobalCountersTCPState OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sub-tree for Global TCPState counters"
|
|
::= { panGlobalCounters 11 }
|
|
|
|
panGlobalCountersTunnelInspect OBJECT-IDENTITY
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Sub-tree for Global Tunnel (GRE, IPSEC and GTP) counters"
|
|
::= { panGlobalCounters 12 }
|
|
|
|
|
|
----------------------------------------------------------------------
|
|
-- Global DOS Counters
|
|
|
|
panFlowDosAgMaxSessLimit OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session limit reached for aggregate profile, drop session"
|
|
::= { panGlobalCountersDOSCounters 1 }
|
|
|
|
panFlowDosBlkNumEntries OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of entries in DOS block table"
|
|
::= { panGlobalCountersDOSCounters 2 }
|
|
|
|
panFlowDosClMaxSessLimit OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session limit reached for classified profile, drop session"
|
|
::= { panGlobalCountersDOSCounters 3 }
|
|
|
|
panFlowDosClSyncookieAckErr OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP SYN cookies: Invalid ACKs received, classified profile"
|
|
::= { panGlobalCountersDOSCounters 4 }
|
|
|
|
panFlowDosClSyncookieAckRcv OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP SYN cookies: ACKs to cookies received, classified profile"
|
|
::= { panGlobalCountersDOSCounters 5 }
|
|
|
|
panFlowDosClSyncookieBlkDur OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Flagged for blocking and under block duration for cl"
|
|
::= { panGlobalCountersDOSCounters 6 }
|
|
|
|
panFlowDosClSyncookieMax OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packet dropped: SYN cookies maximum threshold reached, classified pro"
|
|
::= { panGlobalCountersDOSCounters 7 }
|
|
|
|
panFlowDosClSyncookieSent OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP SYN cookies: cookies sent, classified profile"
|
|
::= { panGlobalCountersDOSCounters 8 }
|
|
|
|
panFlowMeterVsysThrottle OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session metering: sessions throttled by vsys configuration"
|
|
::= { panGlobalCountersDOSCounters 9 }
|
|
|
|
|
|
panFlowPolicyDeny OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session setup: denied by policy"
|
|
::= { panGlobalCountersDOSCounters 10 }
|
|
|
|
panFlowPolicyNat OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session setup: source NAT IP/port allocation error"
|
|
::= { panGlobalCountersDOSCounters 11 }
|
|
|
|
panFlowScanDrop OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session setup: denied by scan detection"
|
|
::= { panGlobalCountersDOSCounters 12 }
|
|
|
|
panFlowDosDropIpBlocked OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Flagged for blocking and under block duration by oth"
|
|
::= { panGlobalCountersDOSCounters 13 }
|
|
|
|
panFlowDosRedIcmp OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Zone protection protocol 'icmp' RED"
|
|
::= { panGlobalCountersDOSCounters 14 }
|
|
|
|
panFlowDosRedIcmp6 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Zone protection protocol 'icmpv6' RED"
|
|
::= { panGlobalCountersDOSCounters 15 }
|
|
|
|
|
|
panFlowDosRedIp OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Zone protection protocol 'other-ip' RED"
|
|
::= { panGlobalCountersDOSCounters 16 }
|
|
|
|
panFlowDosRedTcp OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Zone protection protocol 'tcp-syn' RED"
|
|
::= { panGlobalCountersDOSCounters 17 }
|
|
|
|
panFlowDosRedUdp OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Zone protection protocol 'udp' RED"
|
|
::= { panGlobalCountersDOSCounters 18 }
|
|
|
|
panFlowDosRuleAgBlkDur OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Flagged for blocking and under block duration for ag"
|
|
::= { panGlobalCountersDOSCounters 19 }
|
|
|
|
panFlowDosRuleAgRedAct OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Activate aggregate RED threshold reached, random ear"
|
|
::= { panGlobalCountersDOSCounters 20 }
|
|
|
|
panFlowDosRuleAgRedMax OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Maximal aggregate RED threshold reached"
|
|
::= { panGlobalCountersDOSCounters 21 }
|
|
|
|
panFlowDosRuleDeny OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Denied action by DoS policy"
|
|
::= { panGlobalCountersDOSCounters 22 }
|
|
|
|
panFlowDosRuleDrop OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Rate limited or IP blocked"
|
|
::= { panGlobalCountersDOSCounters 23 }
|
|
|
|
panFlowDosRuleDropAggr OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: due to aggregate rate limiting"
|
|
::= { panGlobalCountersDOSCounters 24 }
|
|
|
|
panFlowDosRuleDropClBlkDur OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Flagged for blocking and under block duration for cl"
|
|
::= { panGlobalCountersDOSCounters 25 }
|
|
|
|
panFlowDosRuleDropClRedAct OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Activate classified RED threshold reached, random ea"
|
|
::= { panGlobalCountersDOSCounters 26 }
|
|
|
|
panFlowDosRuleDropClRedMax OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Maximal classified RED threshold reached"
|
|
::= { panGlobalCountersDOSCounters 27 }
|
|
|
|
panFlowDosRuleDropClassified OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: due to classified rate limiting"
|
|
::= { panGlobalCountersDOSCounters 28 }
|
|
|
|
panFlowDosSyncookieBlkDur OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Flagged for blocking and under block duration for ag"
|
|
::= { panGlobalCountersDOSCounters 29 }
|
|
|
|
panFlowDosSyncookieMax OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packet dropped: SYN cookies maximum threshold reached, aggregate prof"
|
|
::= { panGlobalCountersDOSCounters 30 }
|
|
|
|
panFlowDosZoneRedAct OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Activate zone RED threshold reached, random early dr"
|
|
::= { panGlobalCountersDOSCounters 31 }
|
|
|
|
panFlowDosZoneRedMax OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: Maximal zone RED threshold reached"
|
|
::= { panGlobalCountersDOSCounters 32 }
|
|
|
|
panFlowDosBlkSwEntries OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of entries in DOS Software block table"
|
|
::= { panGlobalCountersDOSCounters 33 }
|
|
|
|
panFlowDosBlkHwEntries OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of entries in DOS Hardware block table"
|
|
::= { panGlobalCountersDOSCounters 34 }
|
|
|
|
panFlowDosSyncookieNotTcpSyn OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP SYN cookies:TCP SYN cookie not SYN"
|
|
::= { panGlobalCountersDOSCounters 35 }
|
|
|
|
panFlowDosSyncookieNotTcpSynAck OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP SYN cookies:TCP SYN cookie not SYN-ACK"
|
|
::= { panGlobalCountersDOSCounters 36 }
|
|
|
|
panFlowDosPfIpspoof OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-ip-spoof'"
|
|
::= { panGlobalCountersDOSCounters 37 }
|
|
|
|
panFlowDosPfIpfrag OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-ip-frag'"
|
|
::= { panGlobalCountersDOSCounters 38 }
|
|
|
|
panFlowDosPfPing0 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-icmp-ping-zero-id'"
|
|
::= { panGlobalCountersDOSCounters 39 }
|
|
|
|
panFlowDosPfIcmpfrag OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-icmp-frag'"
|
|
::= { panGlobalCountersDOSCounters 40 }
|
|
|
|
panFlowDosPfIcmplpkt OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-icmp-large-packet'"
|
|
::= { panGlobalCountersDOSCounters 41 }
|
|
|
|
panFlowDosPfIcmperr OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-icmp-error'"
|
|
::= { panGlobalCountersDOSCounters 42 }
|
|
|
|
panFlowDosPfNoreplyttl OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'suppress-icmp-timeexceeded'"
|
|
::= { panGlobalCountersDOSCounters 43 }
|
|
|
|
panFlowDosPfNoreplyneedfrag OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'suppress-icmp-needfrag'"
|
|
::= { panGlobalCountersDOSCounters 44 }
|
|
|
|
panFlowDosPfStrictsource OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-strict-source-routing'"
|
|
::= { panGlobalCountersDOSCounters 45 }
|
|
|
|
panFlowDosPfLoosesource OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-loose-source-routing'"
|
|
::= { panGlobalCountersDOSCounters 46 }
|
|
|
|
panFlowDosPfTimestamp OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-timestamp'"
|
|
::= { panGlobalCountersDOSCounters 47 }
|
|
|
|
panFlowDosPfRecordroute OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-record-route'"
|
|
::= { panGlobalCountersDOSCounters 48 }
|
|
|
|
panFlowDosPfSecurity OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-security'"
|
|
::= { panGlobalCountersDOSCounters 49 }
|
|
|
|
panFlowDosPfSatnetid OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-stream-id'"
|
|
::= { panGlobalCountersDOSCounters 50 }
|
|
|
|
panFlowDosPfUnknown OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-unknown-option'"
|
|
::= { panGlobalCountersDOSCounters 51 }
|
|
|
|
panFlowDosPfBadoption OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-malformed-option'"
|
|
::= { panGlobalCountersDOSCounters 52 }
|
|
|
|
panFlowDosPfTcpoverlappingmismatch OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-overlapping-tcp-segment-mismatch'"
|
|
::= { panGlobalCountersDOSCounters 53 }
|
|
|
|
panFlowDosPfStrictip OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'strict-ip-check'"
|
|
::= { panGlobalCountersDOSCounters 54 }
|
|
|
|
panFlowDosPfTcpsplithandshake OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-tcp-split-handshake'"
|
|
::= { panGlobalCountersDOSCounters 55 }
|
|
|
|
panFlowDosPfTcpsyndata OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-tcp-syn-with-data'"
|
|
::= { panGlobalCountersDOSCounters 56 }
|
|
|
|
panFlowDosPfTcpsynackdata OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'discard-tcp-synack-with-data'"
|
|
::= { panGlobalCountersDOSCounters 57 }
|
|
|
|
panFlowDosIp6Route0 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-0'"
|
|
::= { panGlobalCountersDOSCounters 58 }
|
|
|
|
panFlowDosIp6Route1 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-1'"
|
|
::= { panGlobalCountersDOSCounters 59 }
|
|
|
|
panFlowDosIp6Route3 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-3'"
|
|
::= { panGlobalCountersDOSCounters 60 }
|
|
|
|
panFlowDosIp6Route4to252 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-4-252'"
|
|
::= { panGlobalCountersDOSCounters 61 }
|
|
|
|
panFlowDosIp6Route253 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-253'"
|
|
::= { panGlobalCountersDOSCounters 62 }
|
|
|
|
panFlowDosIp6Route254 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-254'"
|
|
::= { panGlobalCountersDOSCounters 63 }
|
|
|
|
panFlowDosIp6Route255 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-header-255'"
|
|
::= { panGlobalCountersDOSCounters 64 }
|
|
|
|
panFlowDosIp6Ip4cmpt OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'ipv4-compatible-address'"
|
|
::= { panGlobalCountersDOSCounters 65 }
|
|
|
|
panFlowDosIp6Acast OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'anycast-source'"
|
|
::= { panGlobalCountersDOSCounters 66 }
|
|
|
|
panFlowDosIp6OptionsInvalidIPv6 OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'options-invalid-ipv6-discard'"
|
|
::= { panGlobalCountersDOSCounters 67 }
|
|
|
|
panFlowDosIp6Icmpv6ErrorInvalid OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'icmpv6-too-big-small-mtu-discard'"
|
|
::= { panGlobalCountersDOSCounters 68 }
|
|
|
|
panFlowDosIp6NeedlessIpv6FragHdr OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'needless-fragment-hdr'"
|
|
::= { panGlobalCountersDOSCounters 69 }
|
|
|
|
panFlowDosIp6RsvdSet OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'reserved-field-set-discard'"
|
|
::= { panGlobalCountersDOSCounters 70 }
|
|
|
|
panFlowDosIPv6ExtHdrHopByHop OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'hop-by-hop-hdr'"
|
|
::= { panGlobalCountersDOSCounters 71 }
|
|
|
|
panFlowDosip6IPv6ExtHdrRouting OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'routing-hdr'"
|
|
::= { panGlobalCountersDOSCounters 72 }
|
|
|
|
panFlowDosIp6IPv6ExtHdrDestOpt OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Zone protection option 'dest-option-hdr'"
|
|
::= { panGlobalCountersDOSCounters 73 }
|
|
|
|
panFlowDosPbpDrop OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped:Dropped by packet buffer protection RED"
|
|
::= { panGlobalCountersDOSCounters 74 }
|
|
|
|
panFlowDosCurrSessIncrFailed OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Unable to increment current session count on session create"
|
|
::= { panGlobalCountersDOSCounters 75 }
|
|
|
|
panFlowDosCurrSessDecrFailed OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Unable to decrement current session count on session delete"
|
|
::= { panGlobalCountersDOSCounters 76 }
|
|
|
|
|
|
-------------------------------------------------------------------------------------------------------
|
|
-- Pan Global Drop Counters
|
|
|
|
panFlowFwdL3TtlZero OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packets dropped: IP TTL reaches zero"
|
|
::= { panGlobalCountersDropCounters 1 }
|
|
|
|
panFlowMeterHostThrottle OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session metering: sessions throttled by management session threshold"
|
|
::= { panGlobalCountersDropCounters 2 }
|
|
|
|
panFlowHostServiceDeny OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Device management session denied"
|
|
::= { panGlobalCountersDropCounters 3 }
|
|
|
|
panFlowHostServiceUnknown OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session discarded: unknown application to control plane"
|
|
::= { panGlobalCountersDropCounters 4 }
|
|
|
|
panPktAllocFailure OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packet allocation error"
|
|
::= { panGlobalCountersDropCounters 5 }
|
|
|
|
panPktAllocFailureCos OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packet allocation error due to QoS control"
|
|
::= { panGlobalCountersDropCounters 6 }
|
|
|
|
panSessionDiscard OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Session set to discard by security policy check"
|
|
::= { panGlobalCountersDropCounters 7 }
|
|
|
|
------------------------------------------------------------------------------------------------------
|
|
-- Pan Global IPFragmentation Counters
|
|
|
|
panFlowIpfragFragErr OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Packet dropped: IP fragmentation error"
|
|
::= { panGlobalCountersIPFragmentationCounters 1 }
|
|
|
|
panFlowIpfragRecv OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"IP fragments received"
|
|
::= { panGlobalCountersIPFragmentationCounters 2 }
|
|
|
|
------------------------------------------------------------------------------------------------------
|
|
-- Pan Global TCP State Counters
|
|
|
|
panTcpAllocWqeFailed OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"wqe allocation failure in tcp"
|
|
::= { panGlobalCountersTCPState 1 }
|
|
|
|
panTcpDeny OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"session denied because of failure in tcp reassembly"
|
|
::= { panGlobalCountersTCPState 2 }
|
|
|
|
panTcpDropOutOfWnd OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"out-of-window packets dropped"
|
|
::= { panGlobalCountersTCPState 3 }
|
|
|
|
panTcpDropPacket OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"packets dropped because of failure in tcp reassembly"
|
|
::= { panGlobalCountersTCPState 4 }
|
|
|
|
panFlowActionClose OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP sessions closed via injecting RST"
|
|
::= { panGlobalCountersTCPState 5 }
|
|
|
|
panFlowActionReset OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"TCP clients reset via responding RST"
|
|
::= { panGlobalCountersTCPState 6 }
|
|
|
|
panFlowTcpNonSyn OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Non-SYN TCP packets without session match"
|
|
::= { panGlobalCountersTCPState 7 }
|
|
|
|
|
|
panTcpExceedSegLimit OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"packets dropped due to the limitation on global tcp out-of-order pack"
|
|
::= { panGlobalCountersTCPState 8 }
|
|
|
|
------------------------------------------------------------------------------------------------------
|
|
-- Pan Global Tunnel State Counters
|
|
|
|
panFlowTciGreDecapSuccess OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total GRE sessions tunnel inspected"
|
|
::= { panGlobalCountersTunnelInspect 1 }
|
|
|
|
panFlowTciGreDecapFailed OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total GRE sessions for failed tunnel inspected"
|
|
::= { panGlobalCountersTunnelInspect 2 }
|
|
|
|
panFlowTciGreDecapUnknown OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total unknown tunnel inspection packets in GRE tunnel [passed|dropped]"
|
|
::= { panGlobalCountersTunnelInspect 3 }
|
|
|
|
panFlowTciIpsecDecapSuccess OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total Ipsec sessions tunnel inspected"
|
|
::= { panGlobalCountersTunnelInspect 4 }
|
|
|
|
panFlowTciIpsecDecapFailed OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total IPSEC sessions for failed tunnel inspected"
|
|
::= { panGlobalCountersTunnelInspect 5 }
|
|
|
|
panFlowTciIpsecDecapUnknown OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total unknown tunnel inspection packets in IPSEC tunnel [passed|dropped]"
|
|
::= { panGlobalCountersTunnelInspect 6 }
|
|
|
|
panFlowTciGtpDecapSuccess OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total GTP sessions tunnel inspected"
|
|
::= { panGlobalCountersTunnelInspect 7 }
|
|
|
|
panFlowTciGtpDecapFailed OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total GTP sessions for failed tunnel inspected"
|
|
::= { panGlobalCountersTunnelInspect 8 }
|
|
|
|
panFlowTciGtpDecapUnknown OBJECT-TYPE
|
|
SYNTAX Counter64
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Total unknown tunnel inspection packets in GTP tunnel[passed|dropped]"
|
|
::= { panGlobalCountersTunnelInspect 9 }
|
|
|
|
---------------------------------------------------------------
|
|
-- panIfTable
|
|
|
|
panIfEntry OBJECT-TYPE
|
|
SYNTAX PanIfEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panIfCPS are added to the panIfCPSTable."
|
|
INDEX { ifIndex }
|
|
::= { panIfTable 1 }
|
|
|
|
PanIfEntry ::= SEQUENCE {
|
|
ifIndex Unsigned32,
|
|
ifDescr DisplayString,
|
|
panIfActiveTcpCps Unsigned32,
|
|
panIfActiveUdpCps Unsigned32,
|
|
panIfActiveOtherIpCps Unsigned32
|
|
}
|
|
|
|
ifIndex OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Index of the interface"
|
|
::= { panIfEntry 1 }
|
|
|
|
ifDescr OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Description (name) of the interface"
|
|
::= { panIfEntry 2 }
|
|
|
|
panIfActiveTcpCps OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active TCP connections per second for this interface."
|
|
::= { panIfEntry 3 }
|
|
|
|
panIfActiveUdpCps OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active UDP connections per second for this interface."
|
|
::= { panIfEntry 4 }
|
|
|
|
panIfActiveOtherIpCps OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active Other IP connections per second for this interface."
|
|
::= { panIfEntry 5 }
|
|
|
|
---------------------------------------------------------------
|
|
-- panZoneTable
|
|
|
|
panZoneEntry OBJECT-TYPE
|
|
SYNTAX PanZoneEntry
|
|
MAX-ACCESS not-accessible
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Entries are created when panZoneCPS are added to the panZoneCPSTable."
|
|
INDEX { ifIndex }
|
|
::= { panZoneTable 1 }
|
|
|
|
PanZoneEntry ::= SEQUENCE {
|
|
panZoneName DisplayString,
|
|
panZoneActiveTcpCps Unsigned32,
|
|
panZoneActiveUdpCps Unsigned32,
|
|
panZoneActiveOtherIpCps Unsigned32
|
|
}
|
|
|
|
panZoneName OBJECT-TYPE
|
|
SYNTAX DisplayString
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Zone name for the interface"
|
|
::= { panZoneEntry 1 }
|
|
|
|
panZoneActiveTcpCps OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active TCP connections per second for this zone."
|
|
::= { panZoneEntry 2 }
|
|
|
|
panZoneActiveUdpCps OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active UDP connections per second for this zone."
|
|
::= { panZoneEntry 3 }
|
|
|
|
panZoneActiveOtherIpCps OBJECT-TYPE
|
|
SYNTAX Unsigned32
|
|
MAX-ACCESS read-only
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Number of active Other IP connections per second for this zone."
|
|
::= { panZoneEntry 4 }
|
|
|
|
|
|
--------------------------------------------------------------------------------------------------------
|
|
END
|