Stormshield SN series - Sending of Snmpv2 C Alerts (Traps); Sending of Snmpv1 Alerts (Traps); MIBS and Traps SNMP; Stormshield Network SNMP Event and Alert (Traps) Format

Sending of SNMPv2c alerts (traps)
List of SNMP servers
Destination server
(object)
Host that receives traps, (“Host” object).
Port Port used for sending traps to this host (object type: service). By default, snmptrap.
Community Indicates the community.
Sending of SNMPv1 alerts (traps)
By default, the list of hosts that receive V1 traps will be minimized to point the user to version V2c.
List of SNMP servers
Computer Host that receives traps, (“Host” object).
Port Port used for sending traps to this host (object type: service). By default, snmptrap.
Community Indicates the community.
MIBS and Traps SNMP
The Simple Network Management Protocol (SNMP) allows you to monitor all hosts installed on
your network. SNMP alerts (traps) and data listening (MIB) can be configured using the SNMP
Agent module in your firewall’s web administration interface.
In this module, you will be able to configure the workstations to which the firewall has to send
SNMP events and alerts (traps) or to configure access to those that gather data. This manager
allows you to communicate with the SNMP agent on a firewall and to obtain, manage and monitor
data from any firewall through the network. The SNMP agent authorizes read-only access to
supervisors that comply with SNMP versions v1, v2c, and v3.
To configure data tracking and to receive Stormshield Network traps, you must first group data
from Stormshield Network’s information base (these MIBs are available on Stormshield Network’s
website, at the address indicated in the chapter on Stormshield Network MIBs). MIB data are files
in text format that describe a list of SNMP objects used by the supervisor. These MIBs therefore
provision data that the supervisor would need in order to interpret SNMP traps, events and query
messages sent to the firewall.
The values of Stormshield Network MIB traps are described in the chapter below.
Stormshield Network SNMP event and alert (traps) format
SNMPv2-MIB traps
http://www.net-snmp.org/docs/mibs/snmpMIB.html#notifications
coldStart NOTIFICATION-TYPE
STATUS current
DESCRIPTION "A coldStart trap signifies that the SNMP entity, supporting a notification originator
application, is reinitializing itself and that its configuration may have been altered."
::= { snmpTraps 1 }
warmStart NOTIFICATION-TYPE
STATUS current
Page 313/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
SNMP AGENT