407 lines
9.7 KiB
Plaintext
407 lines
9.7 KiB
Plaintext
-- *****************************************************************
|
|
-- TRELLIX CONFIDENTIAL
|
|
-- TRELLIX-INTRUVERT-TC:
|
|
-- Trellix (Textual Conventions)
|
|
--
|
|
-- Copyright (c) 2022 MUSARUBRA US, LLC
|
|
-- All rights reserved.
|
|
--
|
|
-- *****************************************************************
|
|
|
|
TRELLIX-INTRUVERT-TC DEFINITIONS ::= BEGIN
|
|
|
|
IMPORTS
|
|
MODULE-IDENTITY, Integer32
|
|
FROM SNMPv2-SMI
|
|
TEXTUAL-CONVENTION
|
|
FROM SNMPv2-TC
|
|
ivConventions
|
|
FROM TRELLIX-INTRUVERT-SMI;
|
|
|
|
ivTextualConventions MODULE-IDENTITY
|
|
LAST-UPDATED "200707090000Z"
|
|
ORGANIZATION
|
|
"MUSARUBRA US LLC"
|
|
CONTACT-INFO
|
|
"Trellix Customer Service Department
|
|
|
|
Postal: 6220 American Center Drive
|
|
San Jose CA 95002-2563
|
|
|
|
|
|
Tel: +1 800 338 8754
|
|
|
|
E-mail: support@mcafee.com"
|
|
DESCRIPTION
|
|
"This module defines textual conventions used throughout the
|
|
Trellix enterprise MIBs."
|
|
::= { ivConventions 1 }
|
|
|
|
|
|
TrellixEventCategory ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
equipment (1),
|
|
commnunication (2),
|
|
qos (3),
|
|
environment (4),
|
|
application (5)
|
|
}
|
|
|
|
|
|
TrellixEventSeverity ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
SYNTAX INTEGER {
|
|
unknown (0),
|
|
inform (1),
|
|
clear (2),
|
|
warning (3),
|
|
error (4),
|
|
critical (5)
|
|
}
|
|
|
|
|
|
TrellixFEType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specify speed for Fast Ethernet ports.
|
|
example: 10 or 100 Mbps"
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
ten-Mbps (1),
|
|
hundred-Mbps (2),
|
|
auto-negotiate (3)
|
|
}
|
|
|
|
|
|
TrellixGEType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specify speed for Gigabit Ethernet ports."
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
one-gbps (2),
|
|
auto-negotiate (3)
|
|
}
|
|
|
|
|
|
TrellixIDSAction ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"These specify IDS-specific actions on the management and sensor/analysis card.
|
|
"
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
enable (1),
|
|
disable (2),
|
|
reset (3),
|
|
sigupdate (4),
|
|
swupdate (5),
|
|
sensordown (6),
|
|
certupdate (7),
|
|
hitlessreboot (8)
|
|
}
|
|
|
|
|
|
TrellixIDSActionResult ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Bitmap-encoded integer that indicates detailed results of an action"
|
|
SYNTAX Integer32 (0..255)
|
|
|
|
|
|
TrellixIDSActionStatus ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Status reflecting action outcome."
|
|
SYNTAX INTEGER {
|
|
failed (0),
|
|
succeeded (1),
|
|
sigupdated (2),
|
|
enabled (3),
|
|
disabled (4)
|
|
}
|
|
|
|
|
|
TrellixIDSCardType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Card type aplicable to Trellix IPS.
|
|
Current support limted to
|
|
- Management card
|
|
- Sensor Analysis card"
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
mgmt (1),
|
|
sensor (2)
|
|
}
|
|
|
|
|
|
TrellixIDSOperatingMode ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Operating mode for Trellix IPS Sensor
|
|
|
|
inline-fail-open-passive: read and forward packets to destination. This
|
|
will be fail-open (passive kit)
|
|
monitor-dual-intf: monitor two interfaces using Tap
|
|
monitor-single-intf: monitor span/hub
|
|
inline-fail-close: Uses span dongle cables for the 10/100
|
|
uses external bypass switch for gigabit
|
|
inline-fail-open-active:read and forward packets to destination. This
|
|
will be fail-open. This is available on M-series only.
|
|
"
|
|
SYNTAX INTEGER {
|
|
inline-fail-open-passive (1),
|
|
monitor-dual-intf (2),
|
|
monitor-single-intf (3),
|
|
inline-fail-close (4),
|
|
inline-fail-open-active (5)
|
|
}
|
|
|
|
|
|
TrellixIDSPortType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates type of port.
|
|
gigabitEthernet supports only 1000Mbps, fastEthernet supports
|
|
10/100 Mbps, copperGigabitEthernet supports 10/100/1000 Mbps and
|
|
tenGigabitEthernet supports only 10 Gbps."
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
gigabitEthernet (1),
|
|
fastEthernet (2),
|
|
copperGigabitEthernet (3),
|
|
tenGigabitEthernet (4),
|
|
fortyGigabitEthernet (5), -- support in R-series only
|
|
vnic(6) -- support in V-series only
|
|
}
|
|
|
|
|
|
TrellixIDSResponseMode ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
SYNTAX INTEGER {
|
|
interace-port(0),
|
|
response-port (1),
|
|
management-port (2)
|
|
}
|
|
|
|
|
|
TrellixProductType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
SYNTAX INTEGER {
|
|
ids (0)
|
|
}
|
|
|
|
|
|
TrellixTFTPAction ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
download-image (1),
|
|
download-signature (2),
|
|
upload-dos (3),
|
|
upload-trace (4),
|
|
download-dos (5),
|
|
abort-transfer (6),
|
|
download-sslcert (7),
|
|
download-image-and-signature (8),
|
|
download-mpecert (9),
|
|
download-sgap-ssl-cert (10),
|
|
upload-sgap-ssl-csr (11),
|
|
upload-ibac-ad-file (12),
|
|
download-ibac-ad-file (13),
|
|
upload-sw-tlv-file (14),
|
|
download-PacketCaptureFilter-file(15),
|
|
upload-PacketCaptureFilter-file(16),
|
|
download-geolocation-db-file (17),
|
|
upload-PacketCapturePCAP-file(18),
|
|
download-usrid-acl-file(19),
|
|
download-bot-dat-file(20),
|
|
download-ntba-ssl-cert-file(21),
|
|
upload-dev-prof-file(22),
|
|
-- values 23 and 24 not used as NSM has reserved them for NTBA
|
|
download-matd-ssl-cert-file(25),
|
|
download-ffp-bulk-update(28),
|
|
download-zcenter-ssl-cert(33),
|
|
download-gti-pc-ssl-cert(34),
|
|
upload-suricata-failed-rules-file(35),
|
|
upload-ca-sensor-csr (36),
|
|
download-ca-sensor-cert (37),
|
|
download-syslog-ssl-cert (38)
|
|
}
|
|
|
|
|
|
TrellixTFTPFailedResult ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object defines reasons for TFTP failure.
|
|
Applicable only when the corresponding <TrellixTFTPStatus> is set to 'failed'."
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
invalidFileName (1),
|
|
invalidFileType (2),
|
|
cannotReachServer (3),
|
|
noResponseFromServer (4),
|
|
insufficientDiskSpace (5),
|
|
decryptionError (6),
|
|
accessViolation (7),
|
|
fileAlreadyExists (8),
|
|
channelOutOfSync (9),
|
|
sensorNotInitialized (10),
|
|
realtimeUpdateError (11),
|
|
sigfile1OpenError (12),
|
|
sigfile1StatError (13),
|
|
sigfile1MemoryError (14),
|
|
sigfile1ReadError (15),
|
|
sigfile1NullError (16),
|
|
sigfile1MD5Error (17),
|
|
sigfile1InsufficientSpaceForTotalRules (18),
|
|
sigfile1ConvertError (19),
|
|
sigfile1SplitError (20),
|
|
sigfile2OpenError (21),
|
|
sigfile2StatError (22),
|
|
sigfile2MemoryError (23),
|
|
sigfile2ReadError (24),
|
|
sigfile2NullError (25),
|
|
sigfile2MD5Error (26),
|
|
sigfile2InsufficientSpaceForTotalRules (27),
|
|
sigfile2ConvertError (28),
|
|
sigfile2SplitError (29),
|
|
initIDConvertTablesError (30),
|
|
sigfileMarkError (31),
|
|
sigfileUndoMarkError (32),
|
|
compareSigfilesError (33),
|
|
updateBaseSigfileError (34),
|
|
sensorRebootRequired (35),
|
|
fileParseError (36),
|
|
sigfile1FormatVersionError (37),
|
|
sigfile2FormatVersionError (38),
|
|
fileDoesNotExists (39),
|
|
outOfMemoryError (40),
|
|
transferAborted (41),
|
|
internalApplyError (42),
|
|
incrSigfileUnspportedError (53),
|
|
incrSigfileFormatError (61),
|
|
incrSigfileHasSigsetMismatchError (62),
|
|
incrSigfileMergeError (63)
|
|
}
|
|
|
|
|
|
TrellixTFTPFileType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
""
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
image (1),
|
|
signature (2),
|
|
trace (3),
|
|
dos (4),
|
|
configuration (5),
|
|
sslcert (6),
|
|
image-and-signature (7),
|
|
mpecert (8)
|
|
}
|
|
|
|
|
|
TrellixTFTPInProgressResult ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This object defines user feedback during TFTP progress.
|
|
Applicable only when corresponding <TrellixTFTPStatus> is set to 'inProgress'.
|
|
Indicates percentage of TFTP up/download during the inProgress mode "
|
|
SYNTAX Integer32 (0..100)
|
|
|
|
|
|
TrellixTFTPStatus ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Indicates status of corresponding TFTP action <TrellixTFTPAction> request."
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
failed (1),
|
|
inProgress (2),
|
|
succeeded (3),
|
|
dwnldFailed (11),
|
|
applyFailed (12),
|
|
dwnlding (21),
|
|
dwnldingComplete (22),
|
|
applying (23),
|
|
applyingComplete (24)
|
|
}
|
|
|
|
TrellixCUGEType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specify speed for copper gigabit ethernet ports.
|
|
example: 10 or 100 or 1000Mbps or auto"
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
ten-Mbps (1),
|
|
hundred-Mbps (2),
|
|
auto-negotiate (3),
|
|
one-gbps (4)
|
|
}
|
|
|
|
TrellixPortSpeed ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Specify speed for all types of ports.
|
|
example: 10 or 100 or 1000Mbps or auto or 10Gbps"
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
fixed-ten-Mbps (1),
|
|
fixed-hundred-Mbps (2),
|
|
auto-negotiate-down-hundred-Mbps(3),
|
|
fixed-one-Gbps(4),
|
|
fixed-ten-Gbps(5), -- support in M-series only
|
|
auto-negotiate-ten-Mbps (6),
|
|
auto-negotiate-hundred-Mbps (7),
|
|
auto-negotiate-one-Gbps(8),
|
|
auto-negotiate-ten-Gbps(9), -- support in M-series only
|
|
auto-negotiate-down-one-Gbps(10),
|
|
fixed-forty-Gbps(11) -- support in R-series only
|
|
}
|
|
|
|
TrellixPluggableModuleType ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"Types of supported pluggable modules."
|
|
SYNTAX INTEGER {
|
|
other (0),
|
|
pluggable-module-qsfp (1), -- two 40 gig QSFP ports
|
|
pluggable-module-sfp-plus (2), -- eight SFP+ ports
|
|
pluggable-module-qsfp-4 (3), -- four port QSFP
|
|
pluggable-module-sfp-plus-12 (4), -- 12 port SFP+
|
|
pluggable-module-rj45-6 (5), -- 6 port RJ45
|
|
pluggable-module-sfp-plus-pfo-4-sm (6), -- 4 port SFP+ BPFO single mode
|
|
pluggable-module-sfp-plus-pfo-4-mm-50um (7), -- 4 port SFP+ BPFO multi mode 50um
|
|
pluggable-module-sfp-plus-pfo-4-mm-62-5um (8), -- 4 port SFP+ BPFO multi mode 62.5um
|
|
fixed-ports-sfp-12 (9), -- twelve SFP ports
|
|
pluggable-module-rj45-4 (10) -- 4 port RJ45
|
|
}
|
|
|
|
TrellixPortLinearIndex ::= TEXTUAL-CONVENTION
|
|
STATUS current
|
|
DESCRIPTION
|
|
"This MIB object type indicates the Linear Index of the monitoring port. This index is
|
|
generated by the sensor appliance using the pair of slot index and the port index values.
|
|
The other MIB tables would directly use this linear index, whereever applicable."
|
|
SYNTAX Integer32 (0..1024)
|
|
|
|
|
|
END
|
|
|