SNMP traps and MIBs

You can use these SNMP traps and MIB objects with NGFW Engines.

Table 1. SNMP traps for NGFW Engines
Trap name Objects included Description
fwPolicyInstall fwSecurityPolicy Policy was installed on the Firewall engine.
ipsPolicyInstall ipsSecurityPolicy Policy was installed on the IPS engine.
nodeBoot - Node bootup complete.
nodeHwmon nodeHwmonEvent Hardware monitoring system has detected problems.
nodeOffline nodeOperState Node changed to offline or standby state.
nodeOnline nodeOperState Node changed to online state.
nodeShutdown - Node is shutting down.
nodeTestFailure nodeTestIdentity Test subsystem reported a test failure on the node.
nodeFailedUserLogin - Logon failed on the firewall engine's console or through SSH.
nodeUserLogin nodeLastLogin Log on initiated on the engine's console or through SSH.
nodeUserLogout - Log off on the firewall engine's console or through SSH.
Table 2. Forcepoint NGFW-specific MIBs
MIB Role Engine Version Description
STONESOFT-SMI-MIB - 6.10 or earlier

High-level registrations MIB. This MIB defines the top-level enterprise registrations for the Forcepoint NGFW products in the .iso.org.dod.internet.private.enterprises.stonesoft branch (OID .1.3.6.1.4.1.1369).

The other MIB modules depend on STONESOFT-SMI-MIB, so it is necessary to load STONESOFT-SMI-MIB first.

STONESOFT-NETNODE-MIB FW, IPS, L2FW 6.10 or earlier Generic network node MIB.
STONESOFT-FIREWALL-MIB FW, L2FW 6.10 or earlier Firewall application MIB.
STONESOFT-IPS-MIB IPS 6.10 or earlier IPS application MIB.
FORCEPOINT-NGFW-ENGINE-MIB FW, IPS, L2FW 6.11 or later Engine application MIB.
Note: Traps and other Forcepoint NGFW or Secure SD-WAN specific SNMP OIDs are defined in FORCEPOINT-NGFW-ENGINE-MIB file. For more details, refer to the Enhanced SNMP Agent default in NGFW Engine version 7.0 Knowledge Base article.