Check Point R80.20 - Page 96

Hardware Security Module (HSM)
Next Generation Security Gateway Guide R80.20 | 96
SNMP OID
Returned strings
Explanation
HTTPS
Inspection is
off
HTTPS Inspection feature is not
configured on Security Gateway.
To get HSM configuration status, query this SNMP object:
SNMP OID
Returned strings
Explanation
hsmStatus.hsmEnabled
.1.3.6.1.4.1.2620.1.54.3.1
Enabled
The value of the :enabled()
attribute is set to "yes" in the
$FWDIR/conf/hsm_configuratio
n.C file on Security Gateway.
Disabled
One of these:
• The value of the :enabled()
attribute is set to "no" in the
$FWDIR/conf/hsm_configura
tion.C file on Security Gateway.
• Gemalto HSM Simplified Client
software packages are not
installed on Security Gateway.
• The
$FWDIR/conf/hsm_configura
tion.C file does not exist on
Security Gateway.
• The :enabled() attribute is
corrupted in the
$FWDIR/conf/hsm_configura
tion.C file on Security Gateway.
Important - In such cases, outbound
HTTPS Inspection works without
Gemalto HSM Appliance Server, and
SSL keys are stored on Security
Gateway.
To get HSM configuration status description, query this SNMP object:
SNMP OID
Returned strings
Explanation
hsmStatus.hsmEnabledDescript
ion
.1.3.6.1.4.1.2620.1.54.3.2
HSM is enabled
for HTTPS
inspection
The value of the :enabled()
attribute is set to "yes" in the
$FWDIR/conf/hsm_configuratio
n.C file on Security Gateway.