CISCO-UNIFIED-FIREWALL-MIB Table View

This table summarizes the connection activity on
the firewall per layer3-layer 4 protocol instance.
          
Each entry in the table lists the connection
summary of a distinct network protocol.
          
For instance, the conceptual row corresponding to the
index
          
     cufwConnProtocol = fwpTcp
          
yields the summary of TCP connection activity on the 
firewall since its reboot.

cufwConnSummaryEntry row .1.3.6.1.4.1.9.9.491.1.1.4.1.1

Each entry contains the summary of connection
activity for a layer3-layer4 network protocol.

Indexes

cufwConnProtocol

Column	Syntax	OID
cufwConnProtocol The (L3-L4) protocol for which this conceptual row summarizes the connection activity on the managed entity.	CISCO-FIREWALL-TCCFWNetworkProtocol Type Values: 1 none 2 other 3 ip 4 icmp 5 gre 6 udp 7 tcp	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.1
cufwConnNumAttempted The number of connections attempted since the last reboot of the firewall, corresponding to the protocol denoted by 'cufwConnProtocol'. This value is accumulated from the last reboot of the firewall.	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.2
cufwConnNumSetupsAborted The number of connection setup attempts, corresponding to the protocol denoted by 'cufwConnProtocol', that were aborted before the connection could proceed to completion. The counter includes setup attempts aborted b…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.3
cufwConnNumPolicyDeclined The number of connection attempts that were declined due to security policy, corresponding to the protocol denoted by 'cufwConnProtocol'. This value is accumulated from the last reboot of the firewall.	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.4
cufwConnNumResDeclined The number of connection attempts that were declined due to resource unavailability, corresponding to the protocol denoted by 'cufwConnProtocol'. This value is accumulated from the last reboot of the fir…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.5
cufwConnNumHalfOpen The number of connections that are currently in the process of being established, corresponding to the protocol denoted by 'cufwConnProtocol'.	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.6
cufwConnNumActive The number of connections that are currently active, corresponding to the protocol denoted by 'cufwConnProtocol'.	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.7
cufwConnNumAborted The number of connections that were abnormally terminated after successful establishment, corresponding to the protocol denoted by 'cufwConnProtocol'. This value is accumulated from the last reboot of t…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.8
cufwConnSetupRate1 The connection setup rate averaged over the last 60 seconds corresponding to the protocol denoted by 'cufwConnProtocol'.	Connections Per SecondSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.9
cufwConnSetupRate5 The connection setup rate averaged over the last 300 seconds corresponding to the protocol denoted by 'cufwConnProtocol'.	Connections Per SecondSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.1.1.10

This table lists the summary of firewall
connections pertaining to Layer 7 protocols,
catalogued by distinct application protocols.
          
Each entry in the table lists the connection
summary corresponding to a distinct application 
protocol.
          
For instance, to obtain the connection summary 
for SMTP on the firewall since the last reboot 
of the device, use the conceptual row 
corresponding to 
          
   cufwAppConnProtocol = fwApSmtp

cufwAppConnSummaryEntry row .1.3.6.1.4.1.9.9.491.1.1.4.2.1

Each entry contains the summary of connection
activity for a distinct layer 7 protocol identified
by the index element 'cufwAppConnProtocol'.

Indexes

cufwAppConnProtocol

Column	Syntax	OID
cufwAppConnProtocol The layer7 protocol for which this conceptual row summarizes the connection activity for this firewall.	CISCO-FIREWALL-TCCFWApplicationProtocol Type Values: 1 none 2 other 3 ftp 4 telnet 5 smtp 6 http 7 tacacs 8 dns 9 sqlnet 10 https 11 tftp 12 gopher 13 finger 14 kerberos 15 pop2 16 pop3 17 sunRpc 18 msRpc 19 nntp 20 snmp 21 imap 22 ldap 23 exec 24 login 25 shell 26 msSql 27 sybaseSql 28 nfs 29 lotusnote 30 h323 31 cuseeme 32 realmedia 33 netshow 34 streamworks 35 vdolive 36 sap 37 sip 38 mgcp 39 rtsp 40 skinny 41 gtpV0 42 gtpV1 43 echo 44 discard 45 daytime 46 netstat 47 ssh 48 time 49 tacacsDs 50 bootps 51 bootpc 52 dnsix 53 rtelnet 54 ident 55 sqlServ 56 ntp 57 pwdgen 58 ciscoFna 59 ciscoTna 60 ciscoSys 61 netbiosNs 62 netbiosDgm 63 netbiosSsn 64 sqlSrv 65 snmpTrap 66 rsvd 67 send 68 xdmcp 69 bgp 70 irc 71 qmtp 72 ipx 73 dbase 74 imap3 75 rsvpTunnel 76 hpCollector 77 hpManagedNode 78 hpAlarmMgr 79 microsoftDs 80 creativeServer 81 creativePartnr 82 appleQtc 83 igmpV3Lite 84 isakmp 85 biff 86 who 87 syslog 88 router 89 ncp 90 timed 91 ircServ 92 uucp 93 syslogConn 94 sshell 95 ldaps 96 dhcpFailover 97 msexchRouting 98 entrustSvcs 99 entrustSvcHandler 100 ciscoTdp 101 webster 102 gdoi 103 iscsi 104 cddbp 105 ftps 106 telnets 107 imaps 108 ircs 109 pop3s 110 socks 111 kazaa 112 msSqlM 113 msSna 114 wins 115 ica 116 orasrv 117 rdbDbsDisp 118 vqp 119 icabrowser 120 kermit 121 rsvpEncap 122 l2tp 123 pptp 124 h323Gatestat 125 rWinsock 126 radius 127 hsrp 128 net8Cman 129 oracleEmVp 130 oracleNames 131 oracle 132 ciscoSvcs 133 ciscoNetMgmt 134 stun 135 trRsrb 136 ddnsV3 137 aceSvr 138 giop 139 ttc 140 ipass 141 clp 142 citrixImaClient 143 sms 144 citrix 145 realSecure 146 lotusMtap 147 cifs 148 msDotnetster 149 tarantella 150 fcipPort 151 ssp 152 iscsiTarget 153 mySql 154 msClusterNet 155 ldapAdmin 156 ieee80211Iapp 157 oemAgent 158 rtcPmPort 159 dbControlAgent 160 ipsecMsft 161 sipTls 162 aim 163 pcAnyWhereData 164 pcAnyWhereStat 165 x11 166 ircu 167 n2h2Server 168 h323CallSigAlt 169 yahooMsgr 170 msnMsgr	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.1
cufwAppConnNumAttempted The number of connections attempted since the last reboot of the firewall, corresponding to the protocol denoted by 'cufwAppConnProtocol'. This value is accumulated from the last reboot of the firewall su…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.2
cufwAppConnNumSetupsAborted The number of connection setup attempts, corresponding to the protocol denoted by 'cufwAppConnProtocol', that were aborted before the connection could proceed to completion. The counter includes setup attempts aborted…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.3
cufwAppConnNumPolicyDeclined The number of connection attempts that were declined due to security policy, corresponding to the protocol denoted by 'cufwAppConnProtocol'. This value is accumulated from the last reboot of the firewall…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.4
cufwAppConnNumResDeclined The number of connection attempts that were declined due to resource unavailability, corresponding to the protocol denoted by 'cufwAppConnProtocol'. This value is accumulated from the last reboot of the …	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.5
cufwAppConnNumHalfOpen The number of connections that are currently in the process of being established, corresponding to the protocol denoted by 'cufwAppConnProtocol'.	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.6
cufwAppConnNumActive The number of connections that are currently active, corresponding to the protocol denoted by 'cufwAppConnProtocol'.	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.7
cufwAppConnNumAborted The number of connections that were terminated by the firewall successful establishment, corresponding to the protocol denoted by 'cufwAppConnProtocol'. This value is accumulated from the last reboot of …	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.8
cufwAppConnSetupRate1 The connection setup rate averaged over the last 60 seconds corresponding to the protocol denoted by 'cufwAppConnProtocol'.	Connections Per SecondSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.9
cufwAppConnSetupRate5 The connection setup rate averaged over the last 300 seconds corresponding to the protocol denoted by 'cufwAppConnProtocol'.	Connections Per SecondSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.2.1.10

This table lists the summary of firewall
connections for layer3-layer 4 protocols catalogued 
on a per policy basis.
          
Each entry in the table lists the connection summary of
a distinct network protocol, configured on the specified
policy on the firewall, and pertaining to a specified 
target to which the policy is currently applied. 
          
If a policy is bound to a target, it would have one
or more entries in this table. If the policy is 
detached from the target, all entries corresponding 
to the association between the policy and the target 
are elminated from this table.
          
Although the information is indexed by policy targets
as well, one may aggregate the connection summary for
a specific policy across all the target to which the 
policy is currently applied by setting
          
      cufwConnPolicyTargetType =  'targetAll'

cufwPolicyConnSummaryEntry row .1.3.6.1.4.1.9.9.491.1.1.4.3.1

Each entry contains the summary of connection
activity for a specific protocol in a specific
policy applied to the specified policy target.

Indexes

cufwPolConnPolicy cufwPolConnPolicyTargetType cufwPolConnPolicyTarget cufwPolConnProtocol

Column	Syntax	OID
cufwPolConnPolicy The identity of the firewall policy for which this conceptual row contains the connection activity summary.	CISCO-FIREWALL-TCCFWPolicy Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.1
cufwPolConnPolicyTargetType The type of the entity to which the firewall policy 'cufwPolConnPolicy' has been applied. This could be an interface type (most commonly), the type of another object or a group of objects defined in the firewall configu…	CISCO-FIREWALL-TCCFWPolicyTargetType Type Values: 1 all 2 other 3 interface 4 zone 5 zonepair 6 user 7 usergroup 8 context	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.2
cufwPolConnPolicyTarget The identity of the entity to which the firewall policy 'cufwPolConnPolicy' is applied. This could be an interface object (most commonly), another object or group of objects defined in the firewall configuration.	OctetString Constraints: range: 0-128	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.3
cufwPolConnProtocol The (L3-L4) protocol corresponding to which this conceptual row summarizes the connection activity on the firewall.	CISCO-FIREWALL-TCCFWNetworkProtocol Type Values: 1 none 2 other 3 ip 4 icmp 5 gre 6 udp 7 tcp	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.4
cufwPolConnNumAttempted The number of connections attempted since the last reboot of the firewall, corresponding to the protocol denoted by 'cufwPolConnProtocol', in the policy 'cufwPolConnPolicy' applied to the entity identified by 'cufwPolC…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.5
cufwPolConnNumSetupsAborted The number of connection setup attempts, corresponding to the protocol denoted by 'cufwPolConnProtocol', associated with the policy 'cufwPolConnPolicy' applied to the entity identified by 'cufwPolConnPolicyTarget', th…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.6
cufwPolConnNumPolicyDeclined The number of connection attempts that were declined due to security policy, corresponding to the protocol denoted by 'cufwPolConnProtocol', in the policy 'cufwPolConnPolicy' applied to the entity identified by 'cufwP…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.7
cufwPolConnNumResDeclined The number of connection attempts that were declined due to resource unavailability, corresponding to the protocol denoted by 'cufwPolConnProtocol', in the policy 'cufwPolConnPolicy' applied to the entity identified by…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.8
cufwPolConnNumHalfOpen The number of connections that are currently in the process of being established, corresponding to the protocol denoted by 'cufwPolConnProtocol', in the policy 'cufwPolConnPolicy' applied to the entity identified by '…	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.9
cufwPolConnNumActive The number of connections that are currently active, corresponding to the protocol denoted by 'cufwPolConnProtocol', in the policy 'cufwPolConnPolicy' applied to the entity identified by 'cufwPolConnPolicyTarget'.	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.10
cufwPolConnNumAborted The number of connections that were abnormally terminated after successful establishment, corresponding to the protocol denoted by 'cufwPolConnProtocol', in the policy 'cufwPolConnPolicy' applied to the entity identifi…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.3.1.11

This table lists the summary of firewall
connections pertaining to Layer 7 protocols,
catalogued on a per policy basis
          
Each entry in the table lists the connection
summary of a distinct application protocol, 
configured on the specified policy on the firewall, 
and pertaining to a specified target to which the
policy has been applied.
          
If a policy is bound to a target, it would have one
or more entries in this table. If the policy is
detached from the target, all entries corresponding
to the association between the policy and the target
are elminated from this table.
          
Although the information is indexed by policy targets
as well, one may aggregate the connection summary for
a specific policy across all the target to which the
policy is currently applied by setting
          
      cufwAppConnPolicyTargetType = 'targetALL'

cufwPolicyAppConnSummaryEntry row .1.3.6.1.4.1.9.9.491.1.1.4.4.1

Each entry contains the summary of connection
activity for a specific layer 7 protocol in a
specific policy applied to the specified policy
target.

Indexes

cufwPolAppConnPolicy cufwPolAppConnPolicyTargetType cufwPolAppConnPolicyTarget cufwPolAppConnProtocol

Column	Syntax	OID
cufwPolAppConnPolicy The identity of the firewall policy for which this conceptual row contains the connection activity summary.	CISCO-FIREWALL-TCCFWPolicy Type Constraints: range: 0..128	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.1
cufwPolAppConnPolicyTargetType The type of the entity to which the firewall policy 'cufwPolAppConnPolicy' has been applied. This could be an interface type (most commonly), the type of another object or a group of objects defined in the firewall conf…	CISCO-FIREWALL-TCCFWPolicyTargetType Type Values: 1 all 2 other 3 interface 4 zone 5 zonepair 6 user 7 usergroup 8 context	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.2
cufwPolAppConnPolicyTarget The identity of the entity to which the firewall policy 'cufwPolAppProtocol' refers. This could be an interface object (most commonly), another object or group of objects defined in the firewall configuration.	OctetString Constraints: range: 0-128	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.3
cufwPolAppConnProtocol The layer7 protocol for which this conceptual row summarizes the connection activity for this firewall.	CISCO-FIREWALL-TCCFWApplicationProtocol Type Values: 1 none 2 other 3 ftp 4 telnet 5 smtp 6 http 7 tacacs 8 dns 9 sqlnet 10 https 11 tftp 12 gopher 13 finger 14 kerberos 15 pop2 16 pop3 17 sunRpc 18 msRpc 19 nntp 20 snmp 21 imap 22 ldap 23 exec 24 login 25 shell 26 msSql 27 sybaseSql 28 nfs 29 lotusnote 30 h323 31 cuseeme 32 realmedia 33 netshow 34 streamworks 35 vdolive 36 sap 37 sip 38 mgcp 39 rtsp 40 skinny 41 gtpV0 42 gtpV1 43 echo 44 discard 45 daytime 46 netstat 47 ssh 48 time 49 tacacsDs 50 bootps 51 bootpc 52 dnsix 53 rtelnet 54 ident 55 sqlServ 56 ntp 57 pwdgen 58 ciscoFna 59 ciscoTna 60 ciscoSys 61 netbiosNs 62 netbiosDgm 63 netbiosSsn 64 sqlSrv 65 snmpTrap 66 rsvd 67 send 68 xdmcp 69 bgp 70 irc 71 qmtp 72 ipx 73 dbase 74 imap3 75 rsvpTunnel 76 hpCollector 77 hpManagedNode 78 hpAlarmMgr 79 microsoftDs 80 creativeServer 81 creativePartnr 82 appleQtc 83 igmpV3Lite 84 isakmp 85 biff 86 who 87 syslog 88 router 89 ncp 90 timed 91 ircServ 92 uucp 93 syslogConn 94 sshell 95 ldaps 96 dhcpFailover 97 msexchRouting 98 entrustSvcs 99 entrustSvcHandler 100 ciscoTdp 101 webster 102 gdoi 103 iscsi 104 cddbp 105 ftps 106 telnets 107 imaps 108 ircs 109 pop3s 110 socks 111 kazaa 112 msSqlM 113 msSna 114 wins 115 ica 116 orasrv 117 rdbDbsDisp 118 vqp 119 icabrowser 120 kermit 121 rsvpEncap 122 l2tp 123 pptp 124 h323Gatestat 125 rWinsock 126 radius 127 hsrp 128 net8Cman 129 oracleEmVp 130 oracleNames 131 oracle 132 ciscoSvcs 133 ciscoNetMgmt 134 stun 135 trRsrb 136 ddnsV3 137 aceSvr 138 giop 139 ttc 140 ipass 141 clp 142 citrixImaClient 143 sms 144 citrix 145 realSecure 146 lotusMtap 147 cifs 148 msDotnetster 149 tarantella 150 fcipPort 151 ssp 152 iscsiTarget 153 mySql 154 msClusterNet 155 ldapAdmin 156 ieee80211Iapp 157 oemAgent 158 rtcPmPort 159 dbControlAgent 160 ipsecMsft 161 sipTls 162 aim 163 pcAnyWhereData 164 pcAnyWhereStat 165 x11 166 ircu 167 n2h2Server 168 h323CallSigAlt 169 yahooMsgr 170 msnMsgr	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.4
cufwPolAppConnNumAttempted The number of connections attempted since the last reboot of the firewall, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', in the policy 'cufwPolAppConnPolicy' applied to the entity identified by 'cu…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.5
cufwPolAppConnNumSetupsAborted The number of connection setup attempts, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', associated with the policy 'cufwPolAppConnPolicy' applied to the entity identified by 'cufwPolAppConnPolicyTa…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.6
cufwPolAppConnNumPolicyDeclined The number of connection attempts that were declined due to security policy, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', in the policy 'cufwPolAppConnPolicy' applied to the entity identified by …	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.7
cufwPolAppConnNumResDeclined The number of connection attempts that were declined due to resource unavailability, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', in the policy 'cufwPolAppConnPolicy' applied to the entity identif…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.8
cufwPolAppConnNumHalfOpen The number of connections that are currently in the process of being established, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', in the policy 'cufwPolAppConnPolicy' applied to the entity identifie…	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.9
cufwPolAppConnNumActive The number of connections that are currently active, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', in the policy 'cufwPolAppConnPolicy' applied to the entity identified by 'cufwPolAppConnPolicyTar…	ConnectionsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.10
cufwPolAppConnNumAborted The number of connections that were abnormally terminated after successful establishment, corresponding to the protocol denoted by 'cufwPolAppConnProtocol', in the policy 'cufwPolAppConnPolicy' applied to the entity ide…	ConnectionsSNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.1.4.4.1.11

This table identifies if an application protocol has
been configured for inspection and if so, the name of 
the firewall policy or the inspection configuration
that configures the specified protocol for inspection.
The table also identifies if the specified protocol is
actively being inspected.
          
This table may be used by an administrator to quickly
identify if a protocol is being subjected to application
inspection by the managed firewall.

cufwInspectionEntry row .1.3.6.1.4.1.9.9.491.1.2.3.1

Each entry contains the configuration of
a specific application inspection element.

Indexes

cufwInspectionPolicyName cufwInspectionProtocol

Column	Syntax	OID
cufwInspectionPolicyName The name of the policy that configures the device inspect the protocol specified by 'cufwInspectionProtocol'.	OctetString Constraints: range: 0-128	.1.3.6.1.4.1.9.9.491.1.2.3.1.1
cufwInspectionProtocol The application protocol that is configured for inspection.	CISCO-FIREWALL-TCCFWApplicationProtocol Type Values: 1 none 2 other 3 ftp 4 telnet 5 smtp 6 http 7 tacacs 8 dns 9 sqlnet 10 https 11 tftp 12 gopher 13 finger 14 kerberos 15 pop2 16 pop3 17 sunRpc 18 msRpc 19 nntp 20 snmp 21 imap 22 ldap 23 exec 24 login 25 shell 26 msSql 27 sybaseSql 28 nfs 29 lotusnote 30 h323 31 cuseeme 32 realmedia 33 netshow 34 streamworks 35 vdolive 36 sap 37 sip 38 mgcp 39 rtsp 40 skinny 41 gtpV0 42 gtpV1 43 echo 44 discard 45 daytime 46 netstat 47 ssh 48 time 49 tacacsDs 50 bootps 51 bootpc 52 dnsix 53 rtelnet 54 ident 55 sqlServ 56 ntp 57 pwdgen 58 ciscoFna 59 ciscoTna 60 ciscoSys 61 netbiosNs 62 netbiosDgm 63 netbiosSsn 64 sqlSrv 65 snmpTrap 66 rsvd 67 send 68 xdmcp 69 bgp 70 irc 71 qmtp 72 ipx 73 dbase 74 imap3 75 rsvpTunnel 76 hpCollector 77 hpManagedNode 78 hpAlarmMgr 79 microsoftDs 80 creativeServer 81 creativePartnr 82 appleQtc 83 igmpV3Lite 84 isakmp 85 biff 86 who 87 syslog 88 router 89 ncp 90 timed 91 ircServ 92 uucp 93 syslogConn 94 sshell 95 ldaps 96 dhcpFailover 97 msexchRouting 98 entrustSvcs 99 entrustSvcHandler 100 ciscoTdp 101 webster 102 gdoi 103 iscsi 104 cddbp 105 ftps 106 telnets 107 imaps 108 ircs 109 pop3s 110 socks 111 kazaa 112 msSqlM 113 msSna 114 wins 115 ica 116 orasrv 117 rdbDbsDisp 118 vqp 119 icabrowser 120 kermit 121 rsvpEncap 122 l2tp 123 pptp 124 h323Gatestat 125 rWinsock 126 radius 127 hsrp 128 net8Cman 129 oracleEmVp 130 oracleNames 131 oracle 132 ciscoSvcs 133 ciscoNetMgmt 134 stun 135 trRsrb 136 ddnsV3 137 aceSvr 138 giop 139 ttc 140 ipass 141 clp 142 citrixImaClient 143 sms 144 citrix 145 realSecure 146 lotusMtap 147 cifs 148 msDotnetster 149 tarantella 150 fcipPort 151 ssp 152 iscsiTarget 153 mySql 154 msClusterNet 155 ldapAdmin 156 ieee80211Iapp 157 oemAgent 158 rtcPmPort 159 dbControlAgent 160 ipsecMsft 161 sipTls 162 aim 163 pcAnyWhereData 164 pcAnyWhereStat 165 x11 166 ircu 167 n2h2Server 168 h323CallSigAlt 169 yahooMsgr 170 msnMsgr	.1.3.6.1.4.1.9.9.491.1.2.3.1.2
cufwInspectionStatus This MIB object identifies if the directive to inspect the protocol specified by 'cufwInspectionProtocol' by the policy corresponding to this conceptual row is enabled or disabled.	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.9.9.491.1.2.3.1.3

This table lists the URL filtering servers
configured on the managed device and their
performance statistics.
          
This table is not meant as a device to 
configure URL filtering servers.

cufwUrlfServerEntry row .1.3.6.1.4.1.9.9.491.1.3.3.1.1

Each entry contains the configuration of
a specific URL filtering server.

Indexes

cufwUrlfServerAddrType cufwUrlfServerAddress cufwUrlfServerPort

Column	Syntax	OID
cufwUrlfServerAddrType The type of the IP address of the URL filtering server.	INET-ADDRESS-MIBInetAddressType Type Values: 0 unknown 1 ipv4 2 ipv6 3 ipv4z 4 ipv6z 16 dns 25 l2vpn	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.1
cufwUrlfServerAddress The value of the IP address of the URL filtering server.	INET-ADDRESS-MIBInetAddress Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.2
cufwUrlfServerPort The value of the port at which the URL filtering server listens for incoming requests.	INET-ADDRESS-MIBInetPortNumber Type Constraints: range: 0..65535	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.3
cufwUrlfServerVendor The vendor type of the URL filtering server.	CISCO-FIREWALL-TCCFWUrlfVendorId Type Values: 1 other 2 websense 3 n2h2	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.4
cufwUrlfServerStatus The status of the URL filtering server corresponding to this conceptual row.	CISCO-FIREWALL-TCCFWUrlServerStatus Type Values: 1 online 2 offline 3 indeterminate	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.5
cufwUrlfServerReqsNumProcessed The number of URL access requests forwarded by the managed firewall device to the URL filtering server corresponding to this conceptual row. This value is counted from the last reboot of the managed devic…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.6
cufwUrlfServerReqsNumAllowed The number of URL access requests allowed by the URL filtering server corresponding to this conceptual row. This counter does not include late responses. This value is counted from the last reboot of the…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.7
cufwUrlfServerReqsNumDenied The number of URL access requests denied by the URL filtering server corresponding to this conceptual row. This counter does not include late responses. This value is counted from the last reboot of the …	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.8
cufwUrlfServerNumTimeouts The number of times the firewall failed to receive a response from the URL filtering server corresponding to this conceptual row, for a request to authorize a URL access request. This is equal to the nu…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.9
cufwUrlfServerNumRetries The number of URL access authorization requests re-sent by the firewall to the URL Filtering Server corresponding to this conceptual row, because a response was not received within the configured time interval from the…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.10
cufwUrlfServerRespsNumReceived The number of URL access responses received by the firewall from the URL filtering server corresponding to this conceptual row. This counter does not include late responses. This value is counted from t…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.11
cufwUrlfServerRespsNumLate The number of URL access responses received by the managed firewall from the URL filtering server corresponding to this conceptual row after the original URL access request was removed from the queue of pending reque…	SNMPv2-SMICounter64 Type Constraints: range: 0..18446744073709551615	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.12
cufwUrlfServerAvgRespTime1 The average round-trip response time of the URL filtering server computed over the last 60 seconds. A value of zero indicates that there was insufficient data to compute this value over the last time in…	secondsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.13
cufwUrlfServerAvgRespTime5 The average round-trip response time of the URL filtering server computed over the last 300 seconds. A value of zero indicates that there was insufficient data to compute this value over the last time i…	secondsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.3.3.1.1.14

This table summarizes the failover state of a logical
group of ASA contexts. The HA switchover happens at the
group level.

cufwFOGrpStatusEntry row .1.3.6.1.4.1.9.9.491.1.4.2.1.1

Each entry in the table lists necessary HA status of a group.

Indexes

cufwFOGroupIndex

Column	Syntax	OID
cufwFOGroupIndex A distinct HA group identifier for which this conceptual row summarizes critical failover data.	CUfwFOGroupId Type Values: 0 default 1 group1 2 group2	.1.3.6.1.4.1.9.9.491.1.4.2.1.1.1
cufwFOGrpLastFailoverAt The date&time at which the last switchover was triggered for an HA group.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.491.1.4.2.1.1.2
cufwFOGrpHAstate The current HA role of a group on the unit being polled. Allowed values are active or standby or unknown.	CISCO-FIREWALL-MIBHardwareStatus Type Values: 1 other 2 up 3 down 4 error 5 overTemp 6 busy 7 noMedia 8 backup 9 active 10 standby	.1.3.6.1.4.1.9.9.491.1.4.2.1.1.3
cufwFOGrpUpTime The Uptime of a group in the current HA role on the unit being polled.	SecondsSNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.4.2.1.1.4
cufwFOGrpContextCount The number of virtual contexts part of the group on the unit being polled.	SNMPv2-SMIGauge32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.4.2.1.1.5

This table summarizes the interface health check status
of each interface in a group per context.

cufwFOInterfaceEntry row .1.3.6.1.4.1.9.9.491.1.4.2.2.1

Each entry in the table pertains to an interface in a context.

Indexes

cufwFOGroupIndex cufwContextId cufwContextifIndex

Column	Syntax	OID
cufwFOGrpId A distinct HA group identifier for which this conceptual row summarizes the interface health.	CUfwFOGroupId Type Values: 0 default 1 group1 2 group2	.1.3.6.1.4.1.9.9.491.1.4.2.2.1.1
cufwContextId The virtual context-id of the ASA context for which this conceptual row summarizes an interface's health within a logical HA group.	Integer32 Constraints: range: 1-250	.1.3.6.1.4.1.9.9.491.1.4.2.2.1.2
cufwContextifIndex The ifIndex from the IF-MIB for an interface in a context.	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.9.9.491.1.4.2.2.1.3
cufwFOInterfaceMonitoring The monitoring state of the interface being addressed in a context.	CUfwInterfaceMonitor Type Values: 0 unknown 1 monitored 2 notMonitored 3 waiting 4 autostateDown 5 shutdown	.1.3.6.1.4.1.9.9.491.1.4.2.2.1.4
cufwFOInterfaceStatus The health-check outcome of the interface being addressed in a context.	CUfwInterfaceHealth Type Values: 0 unknown 1 normal 2 testing 3 linkDown 4 failed 5 noLink	.1.3.6.1.4.1.9.9.491.1.4.2.2.1.5

This table summarizes the statistics of every HA client's
logical updates to and from its peer.

cufwFOLogicalUpdateEntry row .1.3.6.1.4.1.9.9.491.1.4.3.2.1

Each entry in the table lists the transmit and receive
stats summary of a distinct HA client in the system.

Indexes

cufwFOGroupIdx cufwFOCLientId

Column	Syntax	OID
cufwFOGroupIdx A distinct HA group identifier for which this conceptual row summarizes the sync statistics.	CUfwFOGroupId Type Values: 0 default 1 group1 2 group2	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.1
cufwFOCLientId A distinct HA client identifier for which this conceptual row summarizes the sync statistics.	Integer32 Constraints: range: 1-64	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.2
cufwFOCLientName The HA client's name for which this conceptual row summarizes the sync statistics.	OctetString Constraints: range: 0-255	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.3
cufwFOLUTransmitCount The count of transmitted updates sent to peer for the HA client.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.4
cufwFOLUTransmitErrors The count of transmit errors for updates sent to peer for the HA client.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.5
cufwFOLUReceiveCount The count of received updates from peer for the HA client.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.6
cufwFOLUReceiveErrors The count of receive errors for updates from peer for the HA client.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.4.3.2.1.7

This table summarizes the failover state of a logical
group of ASA contexts.

cufwFOHistoryEvEntry row .1.3.6.1.4.1.9.9.491.1.4.4.3.1

Each entry in the table.

Indexes

cufwFOGrpIndex cufwFOHistoryIndex

Column	Syntax	OID
cufwFOGrpIndex A distinct HA group identifier for which this conceptual row summarizes time-tale history of failover events.	CUfwFOGroupId Type Values: 0 default 1 group1 2 group2	.1.3.6.1.4.1.9.9.491.1.4.4.3.1.1
cufwFOHistoryIndex A distinct index that points to an entry in the table for an HA group.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.491.1.4.4.3.1.2
cufwFOGrpHAFromState The log entry points to the HA state that this event transitioned from.	CUfwFOState Type Values: 0 init 1 disabled 2 failed 3 negotiation 4 standbyCold 5 standbyConfig 6 standbyFilesys 7 standbyBulk 8 standby 9 activeFast 10 activeDrain 11 activePreConf 12 activePostConf 13 active 14 invalid	.1.3.6.1.4.1.9.9.491.1.4.4.3.1.3
cufwFOGrpHAToState The log entry points to the HA state that this event transitioned to.	CUfwFOState Type Values: 0 init 1 disabled 2 failed 3 negotiation 4 standbyCold 5 standbyConfig 6 standbyFilesys 7 standbyBulk 8 standby 9 activeFast 10 activeDrain 11 activePreConf 12 activePostConf 13 active 14 invalid	.1.3.6.1.4.1.9.9.491.1.4.4.3.1.4
cufwFOGrpTransitionAt The date&time at which this transition happened for an HA group.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.491.1.4.4.3.1.5
cufwFOGrpTransitionReason The reason for this transition event for an HA group.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.491.1.4.4.3.1.6

This table lists all the ASP frame drops on this firewall device.

cufwAspFrameDropsEntry row .1.3.6.1.4.1.9.9.491.1.5.3.3.1

Each entry in the table pertains to an ASP frame drop.

Indexes

cufwAspFrameDropIndex

Column	Syntax	OID
cufwAspFrameDropIndex Index within the data-plane frame drop list of supported counters.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.491.1.5.3.3.1.1
cufwAspFrameDropName Name of the frame drop counter.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.491.1.5.3.3.1.2
cufwAspFrameDropDescription Description of the frame drop counter.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.491.1.5.3.3.1.3
cufwAspFrameDropValue Frame drop counter value.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.5.3.3.1.4

This table lists all the ASP flow drops on this firewall device.

cufwAspFlowDropsEntry row .1.3.6.1.4.1.9.9.491.1.5.3.4.1

Each entry in the table pertains to an ASP flow drop.

Indexes

cufwAspFlowDropIndex

Column	Syntax	OID
cufwAspFlowDropIndex Index within the data-plane flow drop list of supported counters.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.491.1.5.3.4.1.1
cufwAspFlowDropName Name of the flow drop counter.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.491.1.5.3.4.1.2
cufwAspFlowDropDescription Description of the flow drop counter.	SNMP-FRAMEWORK-MIBSnmpAdminString Type Constraints: range: 0..255	.1.3.6.1.4.1.9.9.491.1.5.3.4.1.3
cufwAspFlowDropValue Flow drop counter value.	SNMPv2-SMICounter32 Type Constraints: range: 0..4294967295	.1.3.6.1.4.1.9.9.491.1.5.3.4.1.4

This table summarises the health of each interface
in a cluster unit.

cufwCluInterfaceEntry row .1.3.6.1.4.1.9.9.491.1.8.2.3.1

Each entry in the table depicts the health of a clustering interface.

Indexes

cuCluIfcIndex

Column	Syntax	OID
cuCluIfcIndex The ifIndex from the IF-MIB for an interface in a cluster unit.	IF-MIBInterfaceIndex Type Constraints: range: 1..2147483647 Description: A unique value, greater than zero, for each interface or interface sub-layer in the managed system. It is recommended that values are assigned contiguously starting from 1. The value for each interface sub-layer must …	.1.3.6.1.4.1.9.9.491.1.8.2.3.1.1
cufwCluHealthStatus The health-check outcome of the interface being addressed in a cluster unit.	CUfwCluHealth Type Values: 0 init 1 up 2 down 3 goingDown 4 goingUp 5 noLicense 6 none	.1.3.6.1.4.1.9.9.491.1.8.2.3.1.2
cufwCluHealthCheck The monitoring state of the interface being addressed in a cluster unit.	CUfwInterfaceMonitor Type Values: 0 unknown 1 monitored 2 notMonitored 3 waiting 4 autostateDown 5 shutdown	.1.3.6.1.4.1.9.9.491.1.8.2.3.1.3

This table summarises the cluster state transitions' history
in a unit.

cufwCluHistEvEntry row .1.3.6.1.4.1.9.9.491.1.8.3.2.1

Each entry in the table lists details of a cluster state transition.

Indexes

cufwCluHistIndex

Column	Syntax	OID
cufwCluHistIndex A distinct index that points to an entry in the cluster history table for this unit.	SNMPv2-SMIInteger32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.9.9.491.1.8.3.2.1.1
cufwCluFromState The log entry points to the cluster state that this event transitioned from.	CUfwCluState Type Values: 0 disabled 1 election 2 onCall 3 slaveCold 4 slaveAppSync 5 slaveConfig 6 slaveFilesys 7 slaveBulkSync 8 slave 9 slavePending 10 deputyBulkSync 11 deputy 12 masterFast 13 masterDrain 14 masterConfig 15 masterPostConfig 16 master 17 masterDefer	.1.3.6.1.4.1.9.9.491.1.8.3.2.1.2
cufwCluToState The log entry points to the cluster state that this event transitioned to.	CUfwCluState Type Values: 0 disabled 1 election 2 onCall 3 slaveCold 4 slaveAppSync 5 slaveConfig 6 slaveFilesys 7 slaveBulkSync 8 slave 9 slavePending 10 deputyBulkSync 11 deputy 12 masterFast 13 masterDrain 14 masterConfig 15 masterPostConfig 16 master 17 masterDefer	.1.3.6.1.4.1.9.9.491.1.8.3.2.1.3
cufwCluTransitionAt The date&time at which this transition happened for the cluster unit.	SNMPv2-TCDateAndTime Type Constraints: range: 8 range: 11 Description: A date-time specification. field octets contents range ----- ------ -------- ----- 1 1-2 year* 0..65536 2 3 month …	.1.3.6.1.4.1.9.9.491.1.8.3.2.1.4
cufwCluTransitionReason The reason for this transition for the cluster unit.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.9.9.491.1.8.3.2.1.5