SNMP traps and MIBs

You can use these SNMP traps and MIB objects with Secure SD-WAN Engines.

Table 1. SNMP traps for Secure SD-WAN Engines
Trap name Objects included Description
fwPolicyInstall fwSecurityPolicy Policy was installed on the Engine.
ipsPolicyInstall ipsSecurityPolicy Policy was installed on the IPS engine.
nodeBoot - Node bootup complete.
nodeHwmon nodeHwmonEvent Hardware monitoring system has detected problems.
nodeOffline nodeOperState Node changed to offline or standby state.
nodeOnline nodeOperState Node changed to online state.
nodeShutdown - Node is shutting down.
nodeTestFailure nodeTestIdentity Test subsystem reported a test failure on the node.
nodeFailedUserLogin - Logon failed on the engine's console or through SSH.
nodeUserLogin nodeLastLogin Log on initiated on the engine's console or through SSH.
nodeUserLogout - Log off on the engine's console or through SSH.
Table 2. Secure SD-WAN-specific MIBs
MIB Role Engine Version Description
STONESOFT-SMI-MIB - 6.10 or earlier

High-level registrations MIB. This MIB defines the top-level enterprise registrations for the Secure SD-WAN products in the .iso.org.dod.internet.private.enterprises.stonesoft branch (OID .1.3.6.1.4.1.1369).

The other MIB modules depend on STONESOFT-SMI-MIB, so it is necessary to load STONESOFT-SMI-MIB first.

STONESOFT-NETNODE-MIB FW, IPS, L2FW 6.10 or earlier Generic network node MIB.
STONESOFT-FIREWALL-MIB FW, L2FW 6.10 or earlier Engine application MIB.
STONESOFT-IPS-MIB IPS 6.10 or earlier IPS application MIB.
FORCEPOINT-NGFW-ENGINE-MIB FW, IPS, L2FW 6.11 or later Engine application MIB.
Note: Traps and other Forcepoint NGFW or Secure SD-WAN specific SNMP OIDs are defined in FORCEPOINT-NGFW-ENGINE-MIB file. For more details, refer to the Enhanced SNMP Agent default in NGFW Engine version 7.0 Knowledge Base article.