diff options
Diffstat (limited to 'MIBS/paloaltonetworks/PAN-COMMON-MIB')
| -rwxr-xr-x | MIBS/paloaltonetworks/PAN-COMMON-MIB | 2629 |
1 files changed, 2629 insertions, 0 deletions
diff --git a/MIBS/paloaltonetworks/PAN-COMMON-MIB b/MIBS/paloaltonetworks/PAN-COMMON-MIB new file mode 100755 index 0000000..a8b7167 --- /dev/null +++ b/MIBS/paloaltonetworks/PAN-COMMON-MIB @@ -0,0 +1,2629 @@ +-- *********************************************** +-- PAN-COMMON-MIB.my +-- +-- MIB for the common MIB objects implemented by all +-- Palo Alto devices. +-- *********************************************** + +PAN-COMMON-MIB DEFINITIONS ::= BEGIN + + IMPORTS + MODULE-IDENTITY, OBJECT-IDENTITY, + OBJECT-TYPE, NOTIFICATION-TYPE, + Integer32 + FROM SNMPv2-SMI +-- MODULE-COMPLIANCE, OBJECT-GROUP +-- FROM SNMPv2-CONF + TEXTUAL-CONVENTION + FROM SNMPv2-TC + DisplayString, TruthValue, TimeStamp + FROM SNMPv2-TC + TcChassisType + FROM PAN-GLOBAL-TC + panModules, panCommonMib + FROM PAN-GLOBAL-REG; + + panCommonMibModule MODULE-IDENTITY + LAST-UPDATED "201409040000Z" + ORGANIZATION "Palo Alto Networks" + CONTACT-INFO " + Customer Support + Palo Alto Networks + 4401 Great America Pkwy + Santa Clara, CA 95054-1211 + + +1 866-898-9087 + support at paloaltonetworks dot com" + + DESCRIPTION " + A MIB module containing definitions of managed objects + implemented by all Palo Alto Networks' products." + REVISION "201406300000Z" + DESCRIPTION " + Rev 2.3 + Added entries for Log Collector." + REVISION "201409040000Z" + DESCRIPTION " + Rev 2.2 + Added entries for Wildfire content versions. + Added entry for new platform PA 3060." + REVISION "201403060000Z" + DESCRIPTION " + Rev 2.1 + Fixed a capitalization error with PanVsysEntry." + REVISION "201303010000Z" + DESCRIPTION " + Rev 2.0 + Updated with panGlobalProtect and panVsysTable." + REVISION "201102091610Z" + DESCRIPTION " + Rev 1.0 + Initial version of MIB module PAN-COMMON-MIB." + + ::= { panModules 3 } + + FloatValue ::= TEXTUAL-CONVENTION + DISPLAY-HINT "d-2" + STATUS current + DESCRIPTION + " This data type is used to represent Float values." + SYNTAX OCTET STRING (SIZE(0..64)) + + panCommonConfMib OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for MIB conformance statements." + ::= { panCommonMib 1 } + + panCommonObjs OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common MIB objects." + ::= { panCommonMib 2 } + + panCommonEvents OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common MIB events." + ::= { panCommonMib 3 } + + -- Top level groups + + panSys OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common system objects." + ::= { panCommonObjs 1 } + + panChassis OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common chassis information." + ::= { panCommonObjs 2 } + + panSession OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common session information." + ::= { panCommonObjs 3 } + + panMgmt OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common Management plane information." + ::= { panCommonObjs 4 } + + panGlobalProtect OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common GlobalProtect information." + ::= { panCommonObjs 5 } + + panLogCollector OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common Log Collector information." + ::= { panCommonObjs 6 } + + panDeviceLogging OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common Device information." + ::= { panCommonObjs 7 } + + panSSLBroker OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree to capture ssl broker statistics." + ::= { panCommonObjs 8 } + + panGlobalCounters OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for common Global counters." + ::= { panSys 19 } + + ---------------------------------------------------------------------- + -- System objects + + panSysSwVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Full software version. The first two components of the full + version are the major and minor versions. The third component + indicates the maintenance release number and the fourth, + the build number." + ::= { panSys 1 } + + panSysHwVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Hardware version of the unit." + ::= { panSys 2 } + + panSysSerialNumber OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The serial number of the unit. If not available, + an empty string is returned." + ::= { panSys 3 } + + panSysTimeZoneOffset OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The offset in seconds from UTC of the system's time zone. + Values are negative for locations west of UTC and positive + for locations east of UTC." + ::= { panSys 4 } + + panSysDaylightSaving OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Whether daylight savings are in currently in effect for the + system's time zone." + ::= { panSys 5 } + + panSysVpnClientVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed VPN client package version. If + package is not installed, 0.0.0 is returned." + ::= { panSys 6 } + + panSysAppVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed application definition version. If + no application definition is found, 0 is returned." + ::= { panSys 7 } + + panSysAvVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed antivirus version. If no antivirus + is found, 0 is returned." + ::= { panSys 8 } + + panSysThreatVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed threat definition version. If no + threat definition is found, 0 is returned." + ::= { panSys 9 } + + panSysUrlFilteringVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed URL filtering version. If no URL + filtering is installed, 0 is returned." + ::= { panSys 10 } + + panSysHAState OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current high-availability state." + ::= { panSys 11 } + + panSysHAPeerState OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current peer high-availability state." + ::= { panSys 12 } + + panSysHAMode OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current high-availability mode (disabled, + active-passive, or active-active)." + ::= { panSys 13 } + + panSysUrlFilteringDatabase OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current installed URL filtering database + (surfcontrol, brightcloud, etc)" + ::= { panSys 14 } + + panSysGlobalProtectClientVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed global-protect client package version. + If package is not installed, 0.0.0 is returned." + ::= { panSys 15 } + + panSysOpswatDatafileVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed opswat database version. + If package is not installed, 0 is returned." + ::= { panSys 16 } + + panSysWildfireVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed wildfire content version. If no wildfire content + is found, 0 is returned." + ::= { panSys 17 } + + panSysWildfirePrivateCloudVersion OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed wildfire private cloud content version. If no wpc + is found, 0 is returned." + ::= { panSys 18 } + + panSysAppReleaseDate OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed application definition release date. If + no release date is found, unknown is returned." + ::= { panSys 20 } + + panSysThreatReleaseDate OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed threat release date. If + no release date is found, unknown is returned." + ::= { panSys 21 } + + panSysAvReleaseDate OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed antivirus release date. If + no release date is found, unknown is returned." + ::= { panSys 22 } + + panSysWfReleaseDate OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Currently installed WildFire release date. If + no release date is found, unknown is returned." + ::= { panSys 23 } + + ---------------------------------------------------------------------- + -- Chassis + + panChassisType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Chassis type for this Palo Alto device." + ::= { panChassis 1 } + + panMSeriesMode OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Series Mode for this Palo Alto device." + ::= { panChassis 2 } + + + ---------------------------------------------------------------------- + -- Session + + panSessionUtilization OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session table utilization percentage. Values should + be between 0 and 100." + ::= { panSession 1 } + + panSessionMax OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of sessions supported." + ::= { panSession 2 } + + panSessionActive OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of active sessions." + ::= { panSession 3 } + + panSessionActiveTcp OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of active TCP sessions." + ::= { panSession 4 } + + panSessionActiveUdp OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of active UDP sessions." + ::= { panSession 5 } + + panSessionActiveICMP OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of active ICMP sessions." + ::= { panSession 6 } + + panSessionActiveSslProxy OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of active SSL proxy sessions." + ::= { panSession 7 } + + panSessionSslProxyUtilization OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "SSL proxy Session utilization percentage. Values should + be between 0 and 100." + ::= { panSession 8 } + + panVsysTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanVsysEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "VSYS table" + ::= { panSession 9 } + + panZoneTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanZoneEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for the current active connectionsPerSecond (CPS) values + for each zone present." + ::= { panSession 10 } + + panIfTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanIfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for the current active connectionsPerSecond (CPS) values + for each interface present." + ::= { panSession 11 } + + + ---------------------------------------------------------------------- + -- VsysTable + + panVsysEntry OBJECT-TYPE + SYNTAX PanVsysEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when the Vsys's are added to the + entVsysTable." + INDEX { panVsysId } + ::= { panVsysTable 1 } + + PanVsysEntry ::= SEQUENCE { + panVsysId Integer32, + panVsysName DisplayString, + panVsysSessionUtilizationPct Integer32, + panVsysActiveSessions Integer32, + panVsysMaxSessions Integer32, + panVsysActiveTcpCps Integer32, + panVsysActiveUdpCps Integer32, + panVsysActiveOtherIpCps Integer32 + } + + panVsysId OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Vsys id" + ::= { panVsysEntry 1 } + + panVsysName OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "User assigned vsys name (empty string if not available)" + ::= { panVsysEntry 2 } + + panVsysSessionUtilizationPct OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Vsys utilization percentage, if session limit is configured. + If session limit is not configured, this value is '0'" + ::= { panVsysEntry 3 } + + panVsysActiveSessions OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Active sessions on this Vsys" + ::= { panVsysEntry 4 } + + panVsysMaxSessions OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Max sessions on this Vsys, if session limit is configured. + If session limit is not configured, this value is '0'" + ::= { panVsysEntry 5 } + + panVsysActiveTcpCps OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active Tcp Connections per second for thie vSys." + ::= { panVsysEntry 6 } + + panVsysActiveUdpCps OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active Udp Connections per second for thie vSys." + ::= { panVsysEntry 7 } + + panVsysActiveOtherIpCps OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active Other IP Connections per second for thie vSys." + ::= { panVsysEntry 8 } + + ---------------------------------------------------------------------- + -- Mgmt + + panMgmtPanoramaConnected OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current Connection status to Panorama Server (connected, not-connected)" + ::= { panMgmt 1 } + + panMgmtPanorama2Connected OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current Connection status to Panorama2 Server (connected, not-connected)" + ::= { panMgmt 2 } + + ---------------------------------------------------------------------- + -- GlobalProtect + + panGPGatewayUtilization OBJECT-IDENTITY + STATUS current + DESCRIPTION + "GlobalProtect gateway utilization" + ::= { panGlobalProtect 1 } + + ---------------------------------------------------------------------- + -- GlobalProtect gateway utilization + + panGPGWUtilizationPct OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "GlobalProtect Gateway utilization percentage" + ::= { panGPGatewayUtilization 1 } + + panGPGWUtilizationMaxTunnels OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Max tunnels allowed" + ::= { panGPGatewayUtilization 2 } + + panGPGWUtilizationActiveTunnels OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active tunnels" + ::= { panGPGatewayUtilization 3 } + + -------------------------------------------------------------------- + -- Device Logging MIB + panDeviceLoggingLogRate OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for Device Logging Rate statistics." + ::= { panDeviceLogging 1 } + + panDeviceLoggingLogTypeStatTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanDeviceLoggingLogTypeStatEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for the statistics for different log types on the Device." + ::= { panDeviceLogging 2 } + + panDeviceLoggingLogUsageTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanDeviceLoggingLogUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for Log Usage and days retained for different log types on the Device. + Log Disk Usage is avaiable as MB (in use)." + ::= { panDeviceLogging 3 } + + panDeviceLoggingExtFwd OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for tracking dropped logs as ther are forwarded from device." + ::= { panDeviceLogging 4 } + + panDeviceLoggingCollectorConnectionTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanDeviceLoggingCollectorConnectionEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for tracking various log collection entities connected to device." + ::= { panDeviceLogging 5 } + + + --------------------------------------------------------------------------- + -- panSSLBroker + panSSLBrokerStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanSSLBrokerStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Sub-tree for capturing ssl broker statistics and status." + ::= { panSSLBroker 1 } + + panSSLBrokerStatsEntry OBJECT-TYPE + SYNTAX PanSSLBrokerStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entry of ssl broker statistics and status." + INDEX { index } + ::= { panSSLBrokerStatsTable 1 } + + PanSSLBrokerStatsEntry ::= SEQUENCE { + index Integer32, + chainName DisplayString, + avgLatency Integer32, + sessionCount Integer32 + } + + index OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Index of the ssl broker stats entry" + ::= { panSSLBrokerStatsEntry 1 } + + chainName OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Name of ssl broker chain object" + ::= { panSSLBrokerStatsEntry 2 } + + avgLatency OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Average latency value" + ::= { panSSLBrokerStatsEntry 3 } + + sessionCount OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active sessions" + ::= { panSSLBrokerStatsEntry 4 } + + --------------------------------------------------------------------------- + -- panDeviceLoggingLogRate + + panDeviceIncomingLogRate OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The incoming rate in logs/s on the Device." + ::= { panDeviceLoggingLogRate 1 } + + panDeviceWriteLogRate OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The write rate in logs/s on the Device." + ::= { panDeviceLoggingLogRate 2 } + + --------------------------------------------------------------------------- + -- panDeviceLoggingLogTypeStatTable + + panDeviceLoggingLogTypeStatEntry OBJECT-TYPE + SYNTAX PanDeviceLoggingLogTypeStatEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when the panLcLogUsage are added to the panLcLogUsageTable." + INDEX { panDeviceLoggingDevice, panDeviceLoggingLogType } + ::= { panDeviceLoggingLogTypeStatTable 1 } + + PanDeviceLoggingLogTypeStatEntry ::= SEQUENCE { + panDeviceLoggingDevice DisplayString, + panDeviceLoggingDeviceIndex Integer32, + panDeviceLoggingLogType DisplayString, + panDeviceLoggingLogLastLogCreated TimeStamp, + panDeviceLoggingLogLastLogFwded TimeStamp, + panDeviceLoggingLogLastSeqNumberFwded Counter64, + panDeviceLoggingLogLastSeqNumberAck Counter64, + panDeviceLoggingLogTotalLogsFwded Counter64 + } + + panDeviceLoggingDevice OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Device Information (Name or Serial Number)." + ::= { panDeviceLoggingLogTypeStatEntry 1 } + + panDeviceLoggingDeviceIndex OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Index as mentioned in panDeviceLoggingCollectorConnection table." + ::= { panDeviceLoggingLogTypeStatEntry 2 } + + panDeviceLoggingLogType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Type of log." + ::= { panDeviceLoggingLogTypeStatEntry 3 } + + panDeviceLoggingLogLastLogCreated OBJECT-TYPE + SYNTAX TimeStamp + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time of the last log creation." + ::= { panDeviceLoggingLogTypeStatEntry 4 } + + panDeviceLoggingLogLastLogFwded OBJECT-TYPE + SYNTAX TimeStamp + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time at which last log was forwarded." + ::= { panDeviceLoggingLogTypeStatEntry 5 } + + panDeviceLoggingLogLastSeqNumberFwded OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Sequence number of the last log that was forwarded." + ::= { panDeviceLoggingLogTypeStatEntry 6 } + + panDeviceLoggingLogLastSeqNumberAck OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Sequence number of the last log that was acknowledged." + ::= { panDeviceLoggingLogTypeStatEntry 7 } + + panDeviceLoggingLogTotalLogsFwded OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total number of logs forwarded." + ::= { panDeviceLoggingLogTypeStatEntry 8 } + + -------------------------------------------------------------------- + -- PanDeviceLoggingLogUsageEntry + + panDeviceLoggingLogUsageEntry OBJECT-TYPE + SYNTAX PanDeviceLoggingLogUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when the panDeviceLoggingLogUsage are added to the panDeviceLoggingLogUsageTable." + INDEX { panDeviceLoggingLogUsageLogType } + ::= { panDeviceLoggingLogUsageTable 1 } + + PanDeviceLoggingLogUsageEntry ::= SEQUENCE { + panDeviceLoggingLogUsageLogType DisplayString, + panDeviceLoggingDiskUsageDiskSpace FloatValue, + panDeviceLoggingDiskUsageRetention Unsigned32, + panDeviceLoggingDiskQuotaPct FloatValue, + panDeviceLoggingDiskQuota FloatValue + } + + panDeviceLoggingLogUsageLogType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log type for Device. " + ::= { panDeviceLoggingLogUsageEntry 1 } + + panDeviceLoggingDiskUsageDiskSpace OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Usage (MB) for particular log type for Device. " + ::= { panDeviceLoggingLogUsageEntry 2 } + + panDeviceLoggingDiskUsageRetention OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log Rentention for particular log type for Device. " + ::= { panDeviceLoggingLogUsageEntry 3 } + + panDeviceLoggingDiskQuotaPct OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Quota percentage for particular log type for Device. " + ::= { panDeviceLoggingLogUsageEntry 4 } + + panDeviceLoggingDiskQuota OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Quota for particular log type for Device. " + ::= { panDeviceLoggingLogUsageEntry 5 } + + ---------------------------------------------------------------------- + -- panDeviceLoggingExtFwd + + panDeviceLoggingExtFwdCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total count for logs forwarded." + ::= { panDeviceLoggingExtFwd 1 } + + panDeviceLoggingExtFwdQueueDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for logs dropped due to queue being full." + ::= { panDeviceLoggingExtFwd 2 } + + panDeviceLoggingExtFwdStatsSendErr OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for logs discarded due to sending error." + ::= { panDeviceLoggingExtFwd 3 } + + panDeviceLoggingExtFwdStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanDeviceLoggingExtFwdStatsEntry + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This table shows the status of logs as they are forwarded via syslog, Traps, email and + http/https from this Device." + ::= { panDeviceLoggingExtFwd 4 } + + -------------------------------------------------------------------- + -- panDeviceLoggingExtFwdStatsTable + panDeviceLoggingExtFwdStatsEntry OBJECT-TYPE + SYNTAX PanDeviceLoggingExtFwdStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panDeviceLoggingExtFwdStats are added to panDeviceLoggingExtFwdStatsTable." + INDEX { panDeviceLoggingExtFwdStatsTableType } + ::= { panDeviceLoggingExtFwdStatsTable 1 } + + PanDeviceLoggingExtFwdStatsEntry ::= SEQUENCE { + panDeviceLoggingExtFwdStatsTableType DisplayString, + panDeviceLoggingExtFwdStatsTableEnqueueCount Counter64, + panDeviceLoggingExtFwdStatsTableSendCount Counter64, + panDeviceLoggingExtFwdStatsTableDropCount Counter64, + panDeviceLoggingExtFwdStatsTableQueueDepth Counter64, + panDeviceLoggingExtFwdStatsTable1minAvgSendRate Unsigned32 + } + + panDeviceLoggingExtFwdStatsTableType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Name of method used to forward logs." + ::= { panDeviceLoggingExtFwdStatsEntry 1 } + + panDeviceLoggingExtFwdStatsTableEnqueueCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for number of logs enqueued." + ::= { panDeviceLoggingExtFwdStatsEntry 2 } + + panDeviceLoggingExtFwdStatsTableSendCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for number of logs sent." + ::= { panDeviceLoggingExtFwdStatsEntry 3 } + + panDeviceLoggingExtFwdStatsTableDropCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for number of logs dropped." + ::= { panDeviceLoggingExtFwdStatsEntry 4 } + + panDeviceLoggingExtFwdStatsTableQueueDepth OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for depth of queue." + ::= { panDeviceLoggingExtFwdStatsEntry 5 } + + panDeviceLoggingExtFwdStatsTable1minAvgSendRate OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for average send rate over 1 minute interval." + ::= { panDeviceLoggingExtFwdStatsEntry 6 } + + ------------------------------------------------------------------- + -- panDeviceLoggingCollectorConnectionTable + + panDeviceLoggingCollectorConnectionEntry OBJECT-TYPE + SYNTAX PanDeviceLoggingCollectorConnectionEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when the panDeviceLogging are added to the panDeviceLoggingCollectorConnectionTable." + INDEX { panDeviceLoggingCollectorConnectionIP } + ::= { panDeviceLoggingCollectorConnectionTable 1 } + + PanDeviceLoggingCollectorConnectionEntry ::= SEQUENCE { + panDeviceLoggingCollectorConnectionType DisplayString, + panDeviceLoggingCollectorConnectionIP DisplayString, + panDeviceLoggingCollectorConnectionHostname DisplayString, + panDeviceLoggingCollectorConnectionStatus DisplayString + } + + panDeviceLoggingCollectorConnectionType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Type of log collection entity (CMS/LC)." + ::= { panDeviceLoggingCollectorConnectionEntry 1 } + + panDeviceLoggingCollectorConnectionIP OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "IP of log collection entity (CMS/LC) for non-7K and Gryphon. + Will display connection ID for 7K and Gryphon." + ::= { panDeviceLoggingCollectorConnectionEntry 2 } + + panDeviceLoggingCollectorConnectionHostname OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Hostname of log collection entity (CMS/LC)." + ::= { panDeviceLoggingCollectorConnectionEntry 3 } + + panDeviceLoggingCollectorConnectionStatus OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Connection status of log collection entity (CMS/LC)." + ::= { panDeviceLoggingCollectorConnectionEntry 4 } + + ---------------------------------------------------------------------- + -- LogCollector + + panLcStat OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Sub-tree for the Log collection statistics." + ::= { panLogCollector 1 } + + ---------------------------------------------------------------------- + -- LogCollector Stats + + panLcLogRate OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The write rate in logs/s on the Log Collection" + ::= { panLcStat 1 } + + panLcLogDuration OBJECT-IDENTITY + STATUS deprecated + DESCRIPTION " + Sub-tree for the Log Duration on the Log Collector. Log + Duration is Expressed in Days of storage." + ::= { panLcStat 2 } + + panLcDiskUsageTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLcDiskUsageEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION " + Sub-tree for the Log Disk Usage on the Log Collector. Log + Disk Usage is available as MB in use." + ::= { panLcStat 3 } + + panLcLogUsageTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLcLogUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for the Log Usage and data retention on the Log Collector(non localDB). + Log Disk Usage is available as MB in use." + ::= { panLcStat 4 } + + panLocalLogUsageTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLocalLogUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for the Log Usage and data retention on the Log Collector(localDB). + Log Disk Usage is available as MB in use." + ::= { panLcStat 5 } + + panLcDiskIOPSTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLcDiskIOPSEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION " + Sub-tree for Log Disk I/O throughput on the Log Collector and Panorama." + ::= { panLcStat 6 } + + panLcLogDurationTraffic OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the traffic logs on the Log Collector" + ::= { panLcLogDuration 1 } + + panLcLogDurationConfig OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the config logs on the Log Collector" + ::= { panLcLogDuration 2 } + + panLcLogDurationSystem OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the system logs on the Log Collector" + ::= { panLcLogDuration 3 } + + panLcLogDurationThreat OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the threat logs on the Log Collector" + ::= { panLcLogDuration 4 } + + panLcLogDurationAppstat OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the appstat logs on the Log Collector" + ::= { panLcLogDuration 5 } + + panLcLogDurationTrsum OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the trsum logs on the Log Collector" + ::= { panLcLogDuration 6 } + + panLcLogDurationThsum OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the thsum logs on the Log Collector" + ::= { panLcLogDuration 7 } + + panLcLogDurationEvent OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the event logs on the Log Collector" + ::= { panLcLogDuration 8 } + + panLcLogDurationAlarm OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the alarm logs on the Log Collector" + ::= { panLcLogDuration 9 } + + panLcLogDurationHipmatch OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the hipmatch logs on the Log Collector" + ::= { panLcLogDuration 10 } + + panLcLogDurationUserid OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log duration (in days) for the userid logs on the Log Collector" + ::= { panLcLogDuration 11 } + + panLcDiskUsageEntry OBJECT-TYPE + SYNTAX PanLcDiskUsageEntry + MAX-ACCESS not-accessible + STATUS deprecated + DESCRIPTION + "Entries are created when the panLcDiskUsage are added to the + panLcDiskUsageTable." + INDEX { panLcDiskUsageId } + ::= { panLcDiskUsageTable 1 } + + PanLcDiskUsageEntry ::= SEQUENCE { + panLcDiskUsageId Integer32, + panLcDiskUsage Unsigned32 + } + + panLocalLogUsageEntry OBJECT-TYPE + SYNTAX PanLocalLogUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when the panLocalLogUsage are added to the panLocalLogUsageTable." + INDEX { panLcLogType } + ::= { panLocalLogUsageTable 1 } + + PanLocalLogUsageEntry ::= SEQUENCE { + panLocalLogType DisplayString, + panLocalDiskUsageDiskSpace FloatValue, + panLocalDiskUsageRetention Unsigned32, + panLocalDiskQuota FloatValue, + panLocalDiskQuotaPct FloatValue + } + + panLocalLogType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log type for Log Collector. " + ::= { panLocalLogUsageEntry 1 } + + panLocalDiskUsageDiskSpace OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Usage (in MB) for particular log type for Log Collector. " + ::= { panLocalLogUsageEntry 2 } + + panLocalDiskUsageRetention OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log Rentention for particular log type for Log Collector. " + ::= { panLocalLogUsageEntry 3 } + + panLocalDiskQuota OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Quota (in MB) for particular log type for Log Collector. " + ::= { panLocalLogUsageEntry 4 } + + panLocalDiskQuotaPct OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Quota Percentage for particular log type for Log Collector. " + ::= { panLocalLogUsageEntry 5 } + + + panLcDiskIOPSEntry OBJECT-TYPE + SYNTAX PanLcDiskIOPSEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panLcDiskIOPSEntry are added to the panLcDiskIOPSTable." + INDEX { panLcDiskIOPSId } + ::= { panLcDiskIOPSTable 1 } + + PanLcDiskIOPSEntry ::= SEQUENCE { + panLcDiskIOPSId DisplayString, + panLcDiskIORead5min Counter64, + panLcDiskIOWrite5min Counter64 + } + + panLcDiskIOPSId OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk number for Log Collector or Panorama. " + ::= { panLcDiskIOPSEntry 1 } + + panLcDiskIORead5min OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk read rate over a span of 5 minute interval." + ::= { panLcDiskIOPSEntry 2 } + + panLcDiskIOWrite5min OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk write rate over a span of 5 minute interval." + ::= { panLcDiskIOPSEntry 3 } + + panLcLogUsageEntry OBJECT-TYPE + SYNTAX PanLcLogUsageEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when the panLcLogUsage are added to the panLcLogUsageTable." + INDEX { panLcLogType } + ::= { panLcLogUsageTable 1 } + + PanLcLogUsageEntry ::= SEQUENCE { + panLcLogType DisplayString, + panLcDiskUsageDiskSpacePct FloatValue, + panLcDiskUsageRetention Unsigned32, + panLcDiskQuotaPct FloatValue + } + + panLcLogType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log type for Log Collector. " + ::= { panLcLogUsageEntry 1 } + + panLcDiskUsageDiskSpacePct OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Usage Percentage for particular log type for Log Collector + aggregated over all disks. " + ::= { panLcLogUsageEntry 2 } + + panLcDiskUsageRetention OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log Rentention for particular log type for Log Collector. " + ::= { panLcLogUsageEntry 3 } + + panLcDiskQuotaPct OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Disk Quota Percentage for particular log type for Log Collector + aggregated over all disks. " + ::= { panLcLogUsageEntry 4 } + + panLcDiskUsageId OBJECT-TYPE + SYNTAX Integer32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log disk id" + ::= { panLcDiskUsageEntry 1 } + + panLcDiskUsage OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS deprecated + DESCRIPTION + "The Log disk usage on the Log Collector" + ::= { panLcDiskUsageEntry 2 } + + panLcIsRedundancyMember OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "True value indicates this Log Collector is part of a Collector Group with Redundancy is enabled" + ::= { panLogCollector 2 } + + panLcLogFwdStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLcLogFwdStatsEntry + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This table shows the status of logs as they are forwarded via syslog, Traps, email and + http/https from this Log Collector." + ::= { panLogCollector 3 } + ------------------------------------------------------------------ + -- panLcLogFwdStatsTable + + panLcLogFwdStatsEntry OBJECT-TYPE + SYNTAX PanLcLogFwdStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panLcLogFwdStats are added to panLcLogFwdStatsTable." + INDEX { panLcLogFwdStatsTableType } + ::= { panLcLogFwdStatsTable 1 } + + PanLcLogFwdStatsEntry ::= SEQUENCE { + panLcLogFwdStatsTableType DisplayString, + panLcLogFwdStatsTableEnqueueCount Counter64, + panLcLogFwdStatsTableSendCount Counter64, + panLcLogFwdStatsTableDropCount Counter64, + panLcLogFwdStatsTableQueueDepth Counter64 + } + + panLcLogFwdStatsTableType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Name of method used to forward logs." + ::= { panLcLogFwdStatsEntry 1 } + + panLcLogFwdStatsTableEnqueueCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for number of logs enqueued." + ::= { panLcLogFwdStatsEntry 2 } + + panLcLogFwdStatsTableSendCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for number of logs sent." + ::= { panLcLogFwdStatsEntry 3 } + + panLcLogFwdStatsTableDropCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for number of logs dropped." + ::= { panLcLogFwdStatsEntry 4 } + + panLcLogFwdStatsTableQueueDepth OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Counter for depth of queue." + ::= { panLcLogFwdStatsEntry 5 } + + -- panLcLoggingConnectedDeviceTable + + panLcLoggingConnectedDeviceTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLcLoggingConnectedDeviceEntry + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This table shows the details of all devices logging to this Log Collector." + ::= { panLogCollector 4 } + + panLcLoggingConnectedDeviceEntry OBJECT-TYPE + SYNTAX PanLcLoggingConnectedDeviceEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panLcLoggingConnectedDevice are added to panLcLoggingConnectedDeviceTable." + INDEX { panLcLoggingConnectedDeviceConnectionId } + ::= { panLcLoggingConnectedDeviceTable 1 } + + PanLcLoggingConnectedDeviceEntry ::= SEQUENCE { + panLcLoggingConnectedDeviceName DisplayString, + panLcLoggingConnectedDeviceConnectionId DisplayString, + panLcLoggingConnectedIdLogRate Unsigned32 + } + + panLcLoggingConnectedDeviceName OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Name of the device being polled." + ::= { panLcLoggingConnectedDeviceEntry 1 } + + panLcLoggingConnectedDeviceConnectionId OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Connection id of the device being polled." + ::= { panLcLoggingConnectedDeviceEntry 2 } + + panLcLoggingConnectedIdLogRate OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Logging rate for the connection." + ::= { panLcLoggingConnectedDeviceEntry 3 } + + -- panLcLoggingDeviceTable + + panLcLoggingDeviceTable OBJECT-TYPE + SYNTAX SEQUENCE OF PanLcLoggingDeviceEntry + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "This table shows the details of logs forwarded by devices logging to this Log Collector." + ::= { panLogCollector 5 } + + panLcLoggingDeviceEntry OBJECT-TYPE + SYNTAX PanLcLoggingDeviceEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panLcLoggingDevice are added to panLcLoggingDeviceTable." + INDEX { panLcLoggingDeviceConnectionId, + panLcLoggingLogType } + ::= { panLcLoggingDeviceTable 1 } + + PanLcLoggingDeviceEntry ::= SEQUENCE { + panLcLoggingDeviceConnectionId DisplayString, + panLcLoggingLogType DisplayString, + panLcLogTypeLastLogRecd TimeStamp, + panLcLogTypeLastSeqNumRecd Counter64, + panLcLogTypeLastLogGen TimeStamp + } + + panLcLoggingDeviceConnectionId OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Connection id of the device being polled." + ::= { panLcLoggingDeviceEntry 1 } + + panLcLoggingLogType OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Log Type of the log being polled." + ::= { panLcLoggingDeviceEntry 2 } + + panLcLogTypeLastLogRecd OBJECT-TYPE + SYNTAX TimeStamp + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time at which the last log was received." + ::= { panLcLoggingDeviceEntry 3 } + + panLcLogTypeLastSeqNumRecd OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Last sequence number received for a type of log." + ::= { panLcLoggingDeviceEntry 4 } + + panLcLogTypeLastLogGen OBJECT-TYPE + SYNTAX TimeStamp + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Time at which the last log was generated." + ::= { panLcLoggingDeviceEntry 5 } + + ---------------------------------------------------------------------- + -- Events + + panCommonEventObjs OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Branch for objects meant only to be sent in event varbinds." + ::= { panCommonEvents 1 } + + panCommonEventEvents OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Branch for the events themselves." + ::= { panCommonEvents 2 } + + panCommonEventEventsV2 OBJECT-IDENTITY + STATUS current + DESCRIPTION " + Branch for SNMPv2 events. The OIDs for SNMPv2 events should + have a zero as the next-to-last sub-identifier (as specified + in RFC1902)." + ::= { panCommonEventEvents 0 } + + -- Objects sent only in events + + panCommonEventDescr OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "String that provides a textual description of the event." + ::= { panCommonEventObjs 1 } + + -- Event descriptions + + panCommonEventLog NOTIFICATION-TYPE + OBJECTS { panCommonEventDescr } + STATUS current + DESCRIPTION + "A config/system/firewall/threat log" + ::= { panCommonEventEventsV2 1 } + + ---------------------------------------------------------------------- + -- GlobalCounters + + panAhoSw OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total usage of software for AHO" + ::= { panGlobalCounters 1 } + + panDfaSw OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of dfa match using software" + ::= { panGlobalCounters 2 } + + panFlowHostServiceAllow OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Device management session allowed" + ::= { panGlobalCounters 3 } + + panHaPathmonSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "HA path-monitoring packets sent" + ::= { panGlobalCounters 4 } + + panAhoFpga OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total requests to FPGA for AHO" + ::= { panGlobalCounters 5 } + + panDfaFpga OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total requests to FPGA for DFA" + ::= { panGlobalCounters 6 } + + panFpgaPkt OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The packets held because of requests to FPGA" + ::= { panGlobalCounters 7 } + + panGlobalCountersDOSCounters OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Sub-tree for Global DOS counters" + ::= { panGlobalCounters 8 } + + panGlobalCountersDropCounters OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Sub-tree for Global Drop counters" + ::= { panGlobalCounters 9 } + + panGlobalCountersIPFragmentationCounters OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Sub-tree for Global IPFragmentation counters" + ::= { panGlobalCounters 10 } + + panGlobalCountersTCPState OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Sub-tree for Global TCPState counters" + ::= { panGlobalCounters 11 } + + panGlobalCountersTunnelInspect OBJECT-IDENTITY + STATUS current + DESCRIPTION + "Sub-tree for Global Tunnel (GRE, IPSEC and GTP) counters" + ::= { panGlobalCounters 12 } + + + ---------------------------------------------------------------------- + -- Global DOS Counters + + panFlowDosAgMaxSessLimit OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session limit reached for aggregate profile, drop session" + ::= { panGlobalCountersDOSCounters 1 } + + panFlowDosBlkNumEntries OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of entries in DOS block table" + ::= { panGlobalCountersDOSCounters 2 } + + panFlowDosClMaxSessLimit OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session limit reached for classified profile, drop session" + ::= { panGlobalCountersDOSCounters 3 } + + panFlowDosClSyncookieAckErr OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP SYN cookies: Invalid ACKs received, classified profile" + ::= { panGlobalCountersDOSCounters 4 } + + panFlowDosClSyncookieAckRcv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP SYN cookies: ACKs to cookies received, classified profile" + ::= { panGlobalCountersDOSCounters 5 } + + panFlowDosClSyncookieBlkDur OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Flagged for blocking and under block duration for cl" + ::= { panGlobalCountersDOSCounters 6 } + + panFlowDosClSyncookieMax OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet dropped: SYN cookies maximum threshold reached, classified pro" + ::= { panGlobalCountersDOSCounters 7 } + + panFlowDosClSyncookieSent OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP SYN cookies: cookies sent, classified profile" + ::= { panGlobalCountersDOSCounters 8 } + + panFlowMeterVsysThrottle OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session metering: sessions throttled by vsys configuration" + ::= { panGlobalCountersDOSCounters 9 } + + + panFlowPolicyDeny OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session setup: denied by policy" + ::= { panGlobalCountersDOSCounters 10 } + + panFlowPolicyNat OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session setup: source NAT IP/port allocation error" + ::= { panGlobalCountersDOSCounters 11 } + + panFlowScanDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session setup: denied by scan detection" + ::= { panGlobalCountersDOSCounters 12 } + + panFlowDosDropIpBlocked OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Flagged for blocking and under block duration by oth" + ::= { panGlobalCountersDOSCounters 13 } + + panFlowDosRedIcmp OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Zone protection protocol 'icmp' RED" + ::= { panGlobalCountersDOSCounters 14 } + + panFlowDosRedIcmp6 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Zone protection protocol 'icmpv6' RED" + ::= { panGlobalCountersDOSCounters 15 } + + + panFlowDosRedIp OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Zone protection protocol 'other-ip' RED" + ::= { panGlobalCountersDOSCounters 16 } + + panFlowDosRedTcp OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Zone protection protocol 'tcp-syn' RED" + ::= { panGlobalCountersDOSCounters 17 } + + panFlowDosRedUdp OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Zone protection protocol 'udp' RED" + ::= { panGlobalCountersDOSCounters 18 } + + panFlowDosRuleAgBlkDur OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Flagged for blocking and under block duration for ag" + ::= { panGlobalCountersDOSCounters 19 } + + panFlowDosRuleAgRedAct OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Activate aggregate RED threshold reached, random ear" + ::= { panGlobalCountersDOSCounters 20 } + + panFlowDosRuleAgRedMax OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Maximal aggregate RED threshold reached" + ::= { panGlobalCountersDOSCounters 21 } + + panFlowDosRuleDeny OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Denied action by DoS policy" + ::= { panGlobalCountersDOSCounters 22 } + + panFlowDosRuleDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Rate limited or IP blocked" + ::= { panGlobalCountersDOSCounters 23 } + + panFlowDosRuleDropAggr OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: due to aggregate rate limiting" + ::= { panGlobalCountersDOSCounters 24 } + + panFlowDosRuleDropClBlkDur OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Flagged for blocking and under block duration for cl" + ::= { panGlobalCountersDOSCounters 25 } + + panFlowDosRuleDropClRedAct OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Activate classified RED threshold reached, random ea" + ::= { panGlobalCountersDOSCounters 26 } + + panFlowDosRuleDropClRedMax OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Maximal classified RED threshold reached" + ::= { panGlobalCountersDOSCounters 27 } + + panFlowDosRuleDropClassified OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: due to classified rate limiting" + ::= { panGlobalCountersDOSCounters 28 } + + panFlowDosSyncookieBlkDur OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Flagged for blocking and under block duration for ag" + ::= { panGlobalCountersDOSCounters 29 } + + panFlowDosSyncookieMax OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet dropped: SYN cookies maximum threshold reached, aggregate prof" + ::= { panGlobalCountersDOSCounters 30 } + + panFlowDosZoneRedAct OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Activate zone RED threshold reached, random early dr" + ::= { panGlobalCountersDOSCounters 31 } + + panFlowDosZoneRedMax OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: Maximal zone RED threshold reached" + ::= { panGlobalCountersDOSCounters 32 } + + panFlowDosBlkSwEntries OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of entries in DOS Software block table" + ::= { panGlobalCountersDOSCounters 33 } + + panFlowDosBlkHwEntries OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of entries in DOS Hardware block table" + ::= { panGlobalCountersDOSCounters 34 } + + panFlowDosSyncookieNotTcpSyn OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP SYN cookies:TCP SYN cookie not SYN" + ::= { panGlobalCountersDOSCounters 35 } + + panFlowDosSyncookieNotTcpSynAck OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP SYN cookies:TCP SYN cookie not SYN-ACK" + ::= { panGlobalCountersDOSCounters 36 } + + panFlowDosPfIpspoof OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-ip-spoof'" + ::= { panGlobalCountersDOSCounters 37 } + + panFlowDosPfIpfrag OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-ip-frag'" + ::= { panGlobalCountersDOSCounters 38 } + + panFlowDosPfPing0 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-icmp-ping-zero-id'" + ::= { panGlobalCountersDOSCounters 39 } + + panFlowDosPfIcmpfrag OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-icmp-frag'" + ::= { panGlobalCountersDOSCounters 40 } + + panFlowDosPfIcmplpkt OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-icmp-large-packet'" + ::= { panGlobalCountersDOSCounters 41 } + + panFlowDosPfIcmperr OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-icmp-error'" + ::= { panGlobalCountersDOSCounters 42 } + + panFlowDosPfNoreplyttl OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'suppress-icmp-timeexceeded'" + ::= { panGlobalCountersDOSCounters 43 } + + panFlowDosPfNoreplyneedfrag OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'suppress-icmp-needfrag'" + ::= { panGlobalCountersDOSCounters 44 } + + panFlowDosPfStrictsource OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-strict-source-routing'" + ::= { panGlobalCountersDOSCounters 45 } + + panFlowDosPfLoosesource OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-loose-source-routing'" + ::= { panGlobalCountersDOSCounters 46 } + + panFlowDosPfTimestamp OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-timestamp'" + ::= { panGlobalCountersDOSCounters 47 } + + panFlowDosPfRecordroute OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-record-route'" + ::= { panGlobalCountersDOSCounters 48 } + + panFlowDosPfSecurity OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-security'" + ::= { panGlobalCountersDOSCounters 49 } + + panFlowDosPfSatnetid OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-stream-id'" + ::= { panGlobalCountersDOSCounters 50 } + + panFlowDosPfUnknown OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-unknown-option'" + ::= { panGlobalCountersDOSCounters 51 } + + panFlowDosPfBadoption OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-malformed-option'" + ::= { panGlobalCountersDOSCounters 52 } + + panFlowDosPfTcpoverlappingmismatch OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-overlapping-tcp-segment-mismatch'" + ::= { panGlobalCountersDOSCounters 53 } + + panFlowDosPfStrictip OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'strict-ip-check'" + ::= { panGlobalCountersDOSCounters 54 } + + panFlowDosPfTcpsplithandshake OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-tcp-split-handshake'" + ::= { panGlobalCountersDOSCounters 55 } + + panFlowDosPfTcpsyndata OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-tcp-syn-with-data'" + ::= { panGlobalCountersDOSCounters 56 } + + panFlowDosPfTcpsynackdata OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'discard-tcp-synack-with-data'" + ::= { panGlobalCountersDOSCounters 57 } + + panFlowDosIp6Route0 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-0'" + ::= { panGlobalCountersDOSCounters 58 } + + panFlowDosIp6Route1 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-1'" + ::= { panGlobalCountersDOSCounters 59 } + + panFlowDosIp6Route3 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-3'" + ::= { panGlobalCountersDOSCounters 60 } + + panFlowDosIp6Route4to252 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-4-252'" + ::= { panGlobalCountersDOSCounters 61 } + + panFlowDosIp6Route253 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-253'" + ::= { panGlobalCountersDOSCounters 62 } + + panFlowDosIp6Route254 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-254'" + ::= { panGlobalCountersDOSCounters 63 } + + panFlowDosIp6Route255 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-header-255'" + ::= { panGlobalCountersDOSCounters 64 } + + panFlowDosIp6Ip4cmpt OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'ipv4-compatible-address'" + ::= { panGlobalCountersDOSCounters 65 } + + panFlowDosIp6Acast OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'anycast-source'" + ::= { panGlobalCountersDOSCounters 66 } + + panFlowDosIp6OptionsInvalidIPv6 OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'options-invalid-ipv6-discard'" + ::= { panGlobalCountersDOSCounters 67 } + + panFlowDosIp6Icmpv6ErrorInvalid OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'icmpv6-too-big-small-mtu-discard'" + ::= { panGlobalCountersDOSCounters 68 } + + panFlowDosIp6NeedlessIpv6FragHdr OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'needless-fragment-hdr'" + ::= { panGlobalCountersDOSCounters 69 } + + panFlowDosIp6RsvdSet OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'reserved-field-set-discard'" + ::= { panGlobalCountersDOSCounters 70 } + + panFlowDosIPv6ExtHdrHopByHop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'hop-by-hop-hdr'" + ::= { panGlobalCountersDOSCounters 71 } + + panFlowDosip6IPv6ExtHdrRouting OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'routing-hdr'" + ::= { panGlobalCountersDOSCounters 72 } + + panFlowDosIp6IPv6ExtHdrDestOpt OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Zone protection option 'dest-option-hdr'" + ::= { panGlobalCountersDOSCounters 73 } + + panFlowDosPbpDrop OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped:Dropped by packet buffer protection RED" + ::= { panGlobalCountersDOSCounters 74 } + + panFlowDosCurrSessIncrFailed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Unable to increment current session count on session create" + ::= { panGlobalCountersDOSCounters 75 } + + panFlowDosCurrSessDecrFailed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Unable to decrement current session count on session delete" + ::= { panGlobalCountersDOSCounters 76 } + + + ------------------------------------------------------------------------------------------------------- + -- Pan Global Drop Counters + + panFlowFwdL3TtlZero OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packets dropped: IP TTL reaches zero" + ::= { panGlobalCountersDropCounters 1 } + + panFlowMeterHostThrottle OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session metering: sessions throttled by management session threshold" + ::= { panGlobalCountersDropCounters 2 } + + panFlowHostServiceDeny OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Device management session denied" + ::= { panGlobalCountersDropCounters 3 } + + panFlowHostServiceUnknown OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session discarded: unknown application to control plane" + ::= { panGlobalCountersDropCounters 4 } + + panPktAllocFailure OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet allocation error" + ::= { panGlobalCountersDropCounters 5 } + + panPktAllocFailureCos OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet allocation error due to QoS control" + ::= { panGlobalCountersDropCounters 6 } + + panSessionDiscard OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Session set to discard by security policy check" + ::= { panGlobalCountersDropCounters 7 } + + ------------------------------------------------------------------------------------------------------ + -- Pan Global IPFragmentation Counters + + panFlowIpfragFragErr OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Packet dropped: IP fragmentation error" + ::= { panGlobalCountersIPFragmentationCounters 1 } + + panFlowIpfragRecv OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "IP fragments received" + ::= { panGlobalCountersIPFragmentationCounters 2 } + +------------------------------------------------------------------------------------------------------ +-- Pan Global TCP State Counters + + panTcpAllocWqeFailed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "wqe allocation failure in tcp" + ::= { panGlobalCountersTCPState 1 } + + panTcpDeny OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "session denied because of failure in tcp reassembly" + ::= { panGlobalCountersTCPState 2 } + + panTcpDropOutOfWnd OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "out-of-window packets dropped" + ::= { panGlobalCountersTCPState 3 } + + panTcpDropPacket OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "packets dropped because of failure in tcp reassembly" + ::= { panGlobalCountersTCPState 4 } + + panFlowActionClose OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP sessions closed via injecting RST" + ::= { panGlobalCountersTCPState 5 } + + panFlowActionReset OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "TCP clients reset via responding RST" + ::= { panGlobalCountersTCPState 6 } + + panFlowTcpNonSyn OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Non-SYN TCP packets without session match" + ::= { panGlobalCountersTCPState 7 } + + + panTcpExceedSegLimit OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "packets dropped due to the limitation on global tcp out-of-order pack" + ::= { panGlobalCountersTCPState 8 } + + ------------------------------------------------------------------------------------------------------ + -- Pan Global Tunnel State Counters + + panFlowTciGreDecapSuccess OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total GRE sessions tunnel inspected" + ::= { panGlobalCountersTunnelInspect 1 } + + panFlowTciGreDecapFailed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total GRE sessions for failed tunnel inspected" + ::= { panGlobalCountersTunnelInspect 2 } + + panFlowTciGreDecapUnknown OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total unknown tunnel inspection packets in GRE tunnel [passed|dropped]" + ::= { panGlobalCountersTunnelInspect 3 } + + panFlowTciIpsecDecapSuccess OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total Ipsec sessions tunnel inspected" + ::= { panGlobalCountersTunnelInspect 4 } + + panFlowTciIpsecDecapFailed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total IPSEC sessions for failed tunnel inspected" + ::= { panGlobalCountersTunnelInspect 5 } + + panFlowTciIpsecDecapUnknown OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total unknown tunnel inspection packets in IPSEC tunnel [passed|dropped]" + ::= { panGlobalCountersTunnelInspect 6 } + + panFlowTciGtpDecapSuccess OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total GTP sessions tunnel inspected" + ::= { panGlobalCountersTunnelInspect 7 } + + panFlowTciGtpDecapFailed OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total GTP sessions for failed tunnel inspected" + ::= { panGlobalCountersTunnelInspect 8 } + + panFlowTciGtpDecapUnknown OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Total unknown tunnel inspection packets in GTP tunnel[passed|dropped]" + ::= { panGlobalCountersTunnelInspect 9 } + + --------------------------------------------------------------- + -- panIfTable + + panIfEntry OBJECT-TYPE + SYNTAX PanIfEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panIfCPS are added to the panIfCPSTable." + INDEX { ifIndex } + ::= { panIfTable 1 } + + PanIfEntry ::= SEQUENCE { + ifIndex Unsigned32, + ifDescr DisplayString, + panIfActiveTcpCps Unsigned32, + panIfActiveUdpCps Unsigned32, + panIfActiveOtherIpCps Unsigned32 + } + + ifIndex OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Index of the interface" + ::= { panIfEntry 1 } + + ifDescr OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Description (name) of the interface" + ::= { panIfEntry 2 } + + panIfActiveTcpCps OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active TCP connections per second for this interface." + ::= { panIfEntry 3 } + + panIfActiveUdpCps OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active UDP connections per second for this interface." + ::= { panIfEntry 4 } + + panIfActiveOtherIpCps OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active Other IP connections per second for this interface." + ::= { panIfEntry 5 } + + --------------------------------------------------------------- + -- panZoneTable + + panZoneEntry OBJECT-TYPE + SYNTAX PanZoneEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Entries are created when panZoneCPS are added to the panZoneCPSTable." + INDEX { ifIndex } + ::= { panZoneTable 1 } + + PanZoneEntry ::= SEQUENCE { + panZoneName DisplayString, + panZoneActiveTcpCps Unsigned32, + panZoneActiveUdpCps Unsigned32, + panZoneActiveOtherIpCps Unsigned32 + } + + panZoneName OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Zone name for the interface" + ::= { panZoneEntry 1 } + + panZoneActiveTcpCps OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active TCP connections per second for this zone." + ::= { panZoneEntry 2 } + + panZoneActiveUdpCps OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active UDP connections per second for this zone." + ::= { panZoneEntry 3 } + + panZoneActiveOtherIpCps OBJECT-TYPE + SYNTAX Unsigned32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active Other IP connections per second for this zone." + ::= { panZoneEntry 4 } + + +-------------------------------------------------------------------------------------------------------- +END |