SNMP Notifications

Notifications > SNMP Notification Settings... (at the bottom of the page)

SNMP trap notifications are especially useful for monitoring the state of the IWSVA services—IWSVA will issues a trap notifying you if a service stops unexpectedly.

SNMP is setup at the following location: Administration > Network Configuration > SNMP Settings

IWSVA can issue SNMP traps for the following events:

Virus or Internet threats
Security violations (Access attempts to block, filter, or policy-restrict URLs or files)
Pattern, database or scan engine updates
IWSVA service interruptions—five-second polling interval *
System performance metrics—IWSVA periodically sends an SNMP trap with the following performance data:
CPU load percentage
Memory load percentage
Disk load percentage
Concurrent connection (ICAP request and response mode and proxy mode)
Incoming and outgoing throughput (bytes per second)
High Availability events
Hardware monitoring events

* If IWSVA detects that the HTTP or FTP scanning service is down, it will try twice to restart it. If the service cannot be restarted, SNMP traps will be issued to the specified destination every 30 minutes until the service restarts.

The SNMP object identifier (OID) for IWSVA performance metrics is 6101.1.8.8.2.7.0

The SNMP OID for IWSVA hardware monitoring is 1.3.6.1.4.1.6101.301.

The High Availability OIDs are:

OIDTYPE iwssmetricexceedevent_oid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 8 } ;

OIDTYPE iwsslinkdownoid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 9 } ;

OIDTYPE iwsslinkupoid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 10 } ;

OIDTYPE iwss_ha_switch_oid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 11 } ;

OIDTYPE iwss_ha_child_fail_oid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 12 } ;

OIDTYPE iwss_ha_child_recover_oid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 13 } ;

OIDTYPE iwss_ha_sync_fail_oid[] = { 1, 3, 6, 1, 4, 1, 6101, 1, 8, 8, 2, 14 } ;

SNMP Notifications

See also