CISCO-FIREWALL-MIB Table View

Table-centric layout grouping table, row, and column objects.

Standard view Table view

Tables

Rows

Columns

cfwBasicEventsTable

table

.1.3.6.1.4.1.9.9.147.1.1.1.2 · 1 row entry · 10 columns

Open in standard view

Table of basic data for firewall events.  The agent
may choose to delete the instances of cfwBasicEventsEntry
as required because of lack of memory.  The oldest Events 
will be selected first for deletion.

cfwBasicEventsEntry entry .1.3.6.1.4.1.9.9.147.1.1.1.2.1

An entry in the table, containing general information
about an event. This table will always be sparse, i.e.,
each row will instanciate only a subet of the columnar
objects.

Indexes

cfwBasicEventIndex

Column Syntax OID

cfwBasicEventIndex

An index that uniquely identifies an entry in the
log table. These indices are assigned beginning
with 1 and increase by one with each new event logged.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.1

cfwBasicEventTime

The time that the event occurred.

SNMPv2-TCDateAndTime

Textual Convention: SNMPv2-TCDateAndTime OctetString

Type Constraints:
range: 8
range: 11

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.2

cfwBasicSecurityEventType

The type of security-related event that this row contains.
If the event is not security-related this object will not
be instantiated.

SecurityEvent

Textual Convention: SecurityEvent Enumeration

Type Values:

1	other
2	none
3	dos
4	recon
5	pakFwd
6	addrSpoof
7	svcSpoof
8	thirdParty
9	complete
10	invalPak
11	illegCom
12	policy

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.3

cfwBasicContentInspEventType

The type of content inspection-related event that this row
contains. If the event is not content inspection-related
this object will not be instantiated.

ContentInspectionEvent

Textual Convention: ContentInspectionEvent Enumeration

Type Values:

1	other
2	okay
3	error
4	found
5	clean
6	reject
7	saved

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.4

cfwBasicConnectionEventType

The type of connection-related event that this row contains.
If the event is not connection-related this object will not
be instantiated.

ConnectionEvent

Textual Convention: ConnectionEvent Enumeration

Type Values:

1	other
2	accept
3	error
4	drop
5	close
6	timeout
7	refused
8	reset
9	noResp

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.5

cfwBasicAccessEventType

The type of access-related event that this row contains.
If the event is not access-related this object will not be
instantiated.

AccessEvent

Textual Convention: AccessEvent Enumeration

Type Values:

1	other
2	grant
3	deny
4	denyMult
5	error

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.6

cfwBasicAuthenticationEventType

The type of authentication-related event that this row
contains. If the event is not authentication-related this
object will not be instantiated.

AuthenticationEvent

Textual Convention: AuthenticationEvent Enumeration

Type Values:

1	other
2	succ
3	error
4	fail
5	succPriv
6	failPriv
7	failMult

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.7

cfwBasicGenericEventType

The type of generic event that this row contains. If the
event does not fall into one of the other categories this
object will be populated. Otherwise, this object will not
be instantiated.

GenericEvent

Textual Convention: GenericEvent Enumeration

Type Values:

1	abnormal
2	okay
3	error

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.8

cfwBasicEventDescription

A description of the event. The value of the object may
be a zero-length string.

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.9

cfwBasicEventDetailsTableRow

A pointer to a row in the table containing details
about this event. Generally, the table will be the
cfwNetEventsTable but a Cisco-defined table may also
appear here. If there there is no more detailed
information …

SNMPv2-TCRowPointer

Textual Convention: SNMPv2-TCRowPointer ObjectIdentifier

.1.3.6.1.4.1.9.9.147.1.1.1.2.1.10

cfwNetEventsTable

table

.1.3.6.1.4.1.9.9.147.1.1.2.2 · 1 row entry · 14 columns

Open in standard view

Table of detailed data for network events. The
agent may choose to delete the instances of 
cfwBasicEventsEntry as required because of lack of
memory.  It is an implementation-specific matter as
to when this deletion may occur. It is recommended 
that the oldest log instances are deleted first.

cfwNetEventsEntry entry .1.3.6.1.4.1.9.9.147.1.1.2.2.1

An entry in the table, containing detailed information
about an event. Note that this table may be sparse.
If Network Address Translation is not enabled
cfwNetEventInsideSrcIpAddress and
cfwNetEventInsideDstIpAddress w…

Indexes

cfwNetEventIndex

Column Syntax OID

cfwNetEventIndex

An index that uniquely identifies an entry in the
log table. These indices are assigned beginning with
one and increase by one with each new log entry. When
this number wraps, all events are deleted in order to
allow t…

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.1

cfwNetEventInterface

The interface most closely associated with this event.
For example, for an event that relates to the receipt of
a packet, this object identifies the interface on which
the packet was received. If there are multiple i…

IF-MIBInterfaceIndexOrZero

Textual Convention: IF-MIBInterfaceIndexOrZero Integer32

Type Constraints:
range: 0..2147483647

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.2

cfwNetEventSrcIpAddress

Source IP address in the IP packet that caused the
event. If there is no packet associated with the
event this object has the value of zero. If the event is
the result of multiple packets with different source
address…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.3

cfwNetEventInsideSrcIpAddress

Source IP address after Network Address Translation
has been applied. If NAT has not been applied to the
source address in this packet this object will not
be instantiated, resulting in a sparse table. If the
event is t…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.4

cfwNetEventDstIpAddress

Destination IP address in the IP packet that caused
the event. If there is no packet associated with
the event this object has the value of zero. If the event
is the result of multiple packets with different destination…

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.5

cfwNetEventInsideDstIpAddress

Destination IP address after Network Address Translation
has been applied. If NAT has not been applied to the
destination address in this packet this object will not
be instantiated, resulting in a sparse table. If the …

SNMPv2-SMIIpAddress

Textual Convention: SNMPv2-SMIIpAddress OctetString

Type Constraints:
range: 4

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.6

cfwNetEventSrcIpPort

Source UDP/TCP port in the IP packet that caused
the event. If there is no packet associated with the
event this object has the value of zero. If the event
is the result of multiple packets with different source
ports,…

Integer32

Constraints:
range: 0-65535

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.7

cfwNetEventInsideSrcIpPort

Source UDP/TCP port after Port Address Translation
has been applied. If PAT has not been applied to the
source port in this packet this object will not be
instantiated, resulting in a sparse table. If the
event is the…

Integer32

Constraints:
range: 0-65535

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.8

cfwNetEventDstIpPort

Destination UDP/TCP port in the IP packet that caused
the event. If there is no packet associated with the
event this object has the value of zero. If the event is
the result of multiple packets with different destinat…

Integer32

Constraints:
range: 0-65535

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.9

cfwNetEventInsideDstIpPort

Destination UDP/TCP port after Port Address Translation
has been applied. If PAT has not been applied to the
Destination port in this packet this object will not be
instantiated, resulting in a sparse table. If the eve…

Integer32

Constraints:
range: 0-65535

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.10

cfwNetEventService

The identification of the type of service involved
with this event.

Services

Textual Convention: Services Enumeration

Type Values:

1	otherFWService
2	fileXferFtp
3	fileXferTftp
4	fileXferFtps
5	loginTelnet
6	loginRlogin
7	loginTelnets
8	remoteExecSunRPC
9	remoteExecMSRPC
10	remoteExecRsh
11	remoteExecXserver
12	webHttp
13	webHttps
14	mailSmtp
15	multimediaStreamworks
16	multimediaH323
17	multimediaNetShow
18	multimediaVDOLive
19	multimediaRealAV
20	multimediaRTSP
21	dbOracle
22	dbMSsql
23	contInspProgLang
24	contInspUrl
25	directoryNis
26	directoryDns
27	directoryNetbiosns
28	directoryNetbiosdgm
29	directoryNetbiosssn
30	directoryWins
31	qryWhois
32	qryFinger
33	qryIdent
34	fsNfsStatus
35	fsNfs
36	fsCifs
37	protoIcmp
38	protoTcp
39	protoUdp
40	protoIp
41	protoSnmp

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.11

cfwNetEventServiceInformation

Specific service information. This can be used to
describe the particular service indentified by
cfwNetEventService and can reflect whether the service
is a local service or a gateway service. For example,
if the val…

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.12

cfwNetEventIdentity

This object will contain a description of the entity that
caused the event. The entity could be a userid, username,
processid or other identifier for the entity using the service.
If there is no such information then th…

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.13

cfwNetEventDescription

A detailed description of the event.

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.1.2.2.1.14

cfwHardwareStatusTable

table

.1.3.6.1.4.1.9.9.147.1.2.1.1 · 1 row entry · 4 columns

Open in standard view

Table of firewall cfwHardwareStatusEntry entries.

cfwHardwareStatusEntry entry .1.3.6.1.4.1.9.9.147.1.2.1.1.1

An entry in the table, containing status information
about a resource.

Indexes

cfwHardwareType

Column Syntax OID

cfwHardwareType

The hardware type for which this row provides
status information.

Hardware

Textual Convention: Hardware Enumeration

Type Values:

1	memory
2	disk
3	power
4	netInterface
5	cpu
6	primaryUnit
7	secondaryUnit
8	other

.1.3.6.1.4.1.9.9.147.1.2.1.1.1.1

cfwHardwareInformation

A detailed textual description of the resource
identified by cfwHardwareType.

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2

cfwHardwareStatusValue

This object contains the current status of the resource.

HardwareStatus

Textual Convention: HardwareStatus Enumeration

Type Values:

1	other
2	up
3	down
4	error
5	overTemp
6	busy
7	noMedia
8	backup
9	active
10	standby

.1.3.6.1.4.1.9.9.147.1.2.1.1.1.3

cfwHardwareStatusDetail

A detailed textual description of the current status of
the resource which may provide a more specific description
than cfwHardwareStatusValue.

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.2.1.1.1.4

cfwBufferStatsTable

table

.1.3.6.1.4.1.9.9.147.1.2.2.1 · 1 row entry · 4 columns

Open in standard view

A table conatining status information about a firewall's
buffers.

cfwBufferStatsEntry entry .1.3.6.1.4.1.9.9.147.1.2.2.1.1

An entry in the table, containing status information
about a particular statistic for the set of buffers
of a particular size.

Indexes

cfwBufferStatSize cfwBufferStatType

Column Syntax OID

cfwBufferStatSize

This object contains the size of the set of buffers
for which this row contains the statistics given by
cfwBufferStatType.

SNMPv2-SMIUnsigned32

Textual Convention: SNMPv2-SMIUnsigned32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.147.1.2.2.1.1.1

cfwBufferStatType

This object identifies the type of statistic given by
this row for the particular set of buffers identified by
cfwBufferStatSize.

ResourceStatistics

Textual Convention: ResourceStatistics Enumeration

Type Values:

1	highUse
2	highLoad
3	maximum
4	minimum
5	low
6	high
7	average
8	free
9	inUse

.1.3.6.1.4.1.9.9.147.1.2.2.1.1.2

cfwBufferStatInformation

A detailed textual description of the statistic
identified by cfwBufferStatType.

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.2.2.1.1.3

cfwBufferStatValue

The value of the buffer statistic.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.147.1.2.2.1.1.4

cfwConnectionStatTable

table

.1.3.6.1.4.1.9.9.147.1.2.2.2 · 1 row entry · 5 columns

Open in standard view

Table of firewall statistic instances.

cfwConnectionStatEntry entry .1.3.6.1.4.1.9.9.147.1.2.2.2.1

An entry in the table, containing information about a
firewall statistic.

Indexes

cfwConnectionStatService cfwConnectionStatType

Column Syntax OID

cfwConnectionStatService

The identification of the type of connection providing
statistics.

Services

Textual Convention: Services Enumeration

Type Values:

1	otherFWService
2	fileXferFtp
3	fileXferTftp
4	fileXferFtps
5	loginTelnet
6	loginRlogin
7	loginTelnets
8	remoteExecSunRPC
9	remoteExecMSRPC
10	remoteExecRsh
11	remoteExecXserver
12	webHttp
13	webHttps
14	mailSmtp
15	multimediaStreamworks
16	multimediaH323
17	multimediaNetShow
18	multimediaVDOLive
19	multimediaRealAV
20	multimediaRTSP
21	dbOracle
22	dbMSsql
23	contInspProgLang
24	contInspUrl
25	directoryNis
26	directoryDns
27	directoryNetbiosns
28	directoryNetbiosdgm
29	directoryNetbiosssn
30	directoryWins
31	qryWhois
32	qryFinger
33	qryIdent
34	fsNfsStatus
35	fsNfs
36	fsCifs
37	protoIcmp
38	protoTcp
39	protoUdp
40	protoIp
41	protoSnmp

.1.3.6.1.4.1.9.9.147.1.2.2.2.1.1

cfwConnectionStatType

The state of the connections that this row contains
statistics for.

ConnectionStat

Textual Convention: ConnectionStat Enumeration

Type Values:

1	other
2	totalOpen
3	currentOpen
4	currentClosing
5	currentHalfOpen
6	currentInUse
7	high

.1.3.6.1.4.1.9.9.147.1.2.2.2.1.2

cfwConnectionStatDescription

A detailed textual description of this statistic.

SNMP-FRAMEWORK-MIBSnmpAdminString

Textual Convention: SNMP-FRAMEWORK-MIBSnmpAdminString OctetString

Type Constraints:
range: 0..255

.1.3.6.1.4.1.9.9.147.1.2.2.2.1.3

cfwConnectionStatCount

This is an integer that contains the value of the
resource statistic. If a type of 'gauge' is more
appropriate this object will be omitted resulting
in a sparse table.

SNMPv2-SMICounter32

Textual Convention: SNMPv2-SMICounter32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.147.1.2.2.2.1.4

cfwConnectionStatValue

This is an integer that contains the value of the
resource statistic. If a type of 'counter' is more
appropriate this object will be omitted resulting
in a sparse table.

SNMPv2-SMIGauge32

Textual Convention: SNMPv2-SMIGauge32 Unsigned32

Type Constraints:
range: 0..4294967295

.1.3.6.1.4.1.9.9.147.1.2.2.2.1.5