NITROSECURITY-BASE-MIB DEFINITIONS ::= BEGIN

IMPORTS
enterprises,
MODULE-IDENTITY,
OBJECT-IDENTITY,
OBJECT-TYPE,
NOTIFICATION-TYPE,
Integer32,
IpAddress,
Unsigned32
FROM SNMPv2-SMI
TEXTUAL-CONVENTION
FROM SNMPv2-TC
OBJECT-GROUP,
NOTIFICATION-GROUP
FROM SNMPv2-CONF;

nitroRegMIB MODULE-IDENTITY
LAST-UPDATED "201308190000Z" -- Aug 19, 2013
ORGANIZATION "NitroSecurity"
CONTACT-INFO
"McAfee Inc. (previously was 'NitroSecurity, Inc.')

address: 2821 Mission College Blvd.

Santa Clara, CA 95054

support: 1.800.937.2237
[email protected]

www: http://www.mcafee.com"
DESCRIPTION
"Objects and notifications for interfacing with
the McAfee SIEM products, including the McAfee
Enterprise Security Manager (ESM) and the McAfee
Receiver.

The objects and notifications defined in this MIB

are used to:
- Send requests to an ESM for managing the
blacklists and quarantine lists of one or more
IPS devices.
- Send requests to an ESM requesting health status
information for the ESM itself or for
IPS and Receiver devices.
- Send requests to an device to request health status
information for the device.
"
REVISION "201402060000Z" -- Feb 6, 2014
DESCRIPTION
"Add OIDs for nitroHealthDeviceHealth"

REVISION "201308190000Z" -- Aug 19, 2013

DESCRIPTION
"Add OID for nitroInternalEventGeneric"

REVISION "201103280000Z" -- Mar 28, 2011

DESCRIPTION
"IPSID is now represented as an octet string; removed Unsigned64"
 REVISION "201011080000Z" -- Nov 8, 2010
DESCRIPTION
"Removed deprecated/discontinued event/flow structures"

REVISION "201011010000Z" -- Nov 1, 2010

DESCRIPTION
"Added Unsigned64; updated ipsID and blacklistIPSID SYNTAX to Unsigned64"

REVISION "200811240000Z" -- Nov 24, 2008

DESCRIPTION
"Added new fields to alert and connection records. Removed data source
textual convention as it is no longer feasible to include the entire list."

REVISION "200802050000Z" -- Feb 05, 2008

DESCRIPTION
"Added new fields to alert and connection records.
Updated data source types and event actions."

REVISION "200608291751Z" -- Aug 29, 2006 5:51:00 PM

DESCRIPTION
"Initial version for the 7.1.0 release of the NitroView
Enterprise Security Manager (ESM)"

-- 1.3.6.1.4.1.23128
::= { enterprises 23128 }

BlacklistActions ::= TEXTUAL-CONVENTION

STATUS current
DESCRIPTION
"Actions for managing blacklists and
quarantines"
SYNTAX INTEGER {
add(0),
remove(1) }

BlacklistTypes ::= TEXTUAL-CONVENTION

STATUS current
DESCRIPTION
"Enumerates the lists available for blacklists
and quarantines"
SYNTAX INTEGER {
blacklist(1), -- Blocked souces
whitelist(2), -- Immunity from auto-blacklisting
destinationBlacklist(3), -- Blocked destinations
quarantine1(4), -- Quarantine type 1
quarantine2(5), -- Quarantine type 2
quarantine3(6) -- Quarantine type 3
}

-- Scalars and Tables

--

nitroObjects OBJECT IDENTIFIER

-- 1.3.6.1.4.1.23128.1
::= { nitroRegMIB 1 }
health OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Health status information of NitroSecurity applicances (via ESM)"
-- 1.3.6.1.4.1.23128.1.3
::= { nitroObjects 3 }

devicehealth OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Health status information of NitroSecurity applicances"
-- 1.3.6.1.4.1.23128.1.3.30
::= { health 30 }

healthESM OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Health status information of a NitroSecurity NitroView Enterprise
Security Manager (ESM)"
-- 1.3.6.1.4.1.23128.1.3.1
::= { health 1 }

esmCpu OBJECT-TYPE
SYNTAX Unsigned32 (0..100)
UNITS
"percent"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Percentage combined instantaneous CPU load"
-- 1.3.6.1.4.1.23128.1.3.1.1
::= { healthESM 1 }

esmRamTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total RAM"
-- 1.3.6.1.4.1.23128.1.3.1.2
::= { healthESM 2 }

esmRamFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Available RAM"
-- 1.3.6.1.4.1.23128.1.3.1.3
::= { healthESM 3 }
esmDatabaseHDTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total HDD space partitioned for ESM database"
-- 1.3.6.1.4.1.23128.1.3.1.4
::= { healthESM 4 }

esmDatabaseHDFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Free HDD space available for ESM database"
-- 1.3.6.1.4.1.23128.1.3.1.5
::= { healthESM 5 }

esmTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"seconds since 1970-1-1 00:00:0.0 (GMT)"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current system time on the ESM"
-- 1.3.6.1.4.1.23128.1.3.1.6
::= { healthESM 6 }

esmVersion OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ESM version and buildstamp"
-- 1.3.6.1.4.1.23128.1.3.1.7
::= { healthESM 7 }

esmMachineID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Machine ID of the ESM"
-- 1.3.6.1.4.1.23128.1.3.1.8
::= { healthESM 8 }

esmModel OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
 STATUS current
DESCRIPTION
"ESM model number"
-- 1.3.6.1.4.1.23128.1.3.1.9
::= { healthESM 9 }

healthIPS OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Health status information of a NitroSecurity Intrusion Prevention
System (IPS) device"
-- 1.3.6.1.4.1.23128.1.3.2
::= { health 2 }

ipsName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"IPS name"
-- 1.3.6.1.4.1.23128.1.3.2.1
::= { healthIPS 1 }

ipsID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ESM's unique identifier of the IPS"
-- 1.3.6.1.4.1.23128.1.3.2.2
::= { healthIPS 2 }

ipsConnectionAvailable OBJECT-TYPE
SYNTAX Unsigned32 (0..1)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates that communication with the IPS is available (1) or not available
(0)"
-- 1.3.6.1.4.1.23128.1.3.2.3
::= { healthIPS 3 }

ipsStatus OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the current status of the IPS"
-- 1.3.6.1.4.1.23128.1.3.2.4
::= { healthIPS 4 }

ipsBypassStatus OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
 STATUS current
DESCRIPTION
"Indicates the current state of the IPS' bypass NICs"
-- 1.3.6.1.4.1.23128.1.3.2.5
::= { healthIPS 5 }

ipsMode OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the IPS mode (IPS or IDS)"
-- 1.3.6.1.4.1.23128.1.3.2.6
::= { healthIPS 6 }

ipsCpu OBJECT-TYPE
SYNTAX Unsigned32 (0..100)
UNITS
"percent"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Percentage combined instantaneous CPU load"
-- 1.3.6.1.4.1.23128.1.3.2.7
::= { healthIPS 7 }

ipsRamTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total RAM"
-- 1.3.6.1.4.1.23128.1.3.2.8
::= { healthIPS 8 }

ipsRamFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Available RAM"
-- 1.3.6.1.4.1.23128.1.3.2.9
::= { healthIPS 9 }

ipsDatabaseHDTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
 DESCRIPTION
"Total HDD space partitioned for IPS database"
-- 1.3.6.1.4.1.23128.1.3.2.10
::= { healthIPS 10 }

ipsDatabaseHDFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Free HDD space available for IPS database"
-- 1.3.6.1.4.1.23128.1.3.2.11
::= { healthIPS 11 }

ipsTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"seconds since 1970-1-1 00:00:0.0 (GMT)"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current system time on the IPS"
-- 1.3.6.1.4.1.23128.1.3.2.12
::= { healthIPS 12 }

ipsVersion OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"IPS version information and buildstamp"
-- 1.3.6.1.4.1.23128.1.3.2.13
::= { healthIPS 13 }

ipsMachineID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Machine ID of the IPS"
-- 1.3.6.1.4.1.23128.1.3.2.14
::= { healthIPS 14 }

ipsModel OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"IPS model number"
-- 1.3.6.1.4.1.23128.1.3.2.15
::= { healthIPS 15 }
ipsAlertRate OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"alerts per minue"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Alert rate (per minute) for last 10 minutes"
-- 1.3.6.1.4.1.23128.1.3.2.16
::= { healthIPS 16 }

ipsFlowRate OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"flows per minue"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Flow rate (per minute) for last 10 minutes"
-- 1.3.6.1.4.1.23128.1.3.2.17
::= { healthIPS 17 }

healthReceiver OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Health status information of a NitroSecurity Receiver device"
-- 1.3.6.1.4.1.23128.1.3.3
::= { health 3 }

receiverName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Receiver name"
-- 1.3.6.1.4.1.23128.1.3.3.1
::= { healthReceiver 1 }

receiverID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"ESM's unique identifier of the Receiver"
-- 1.3.6.1.4.1.23128.1.3.3.2
::= { healthReceiver 2 }

receiverConnectionAvailable OBJECT-TYPE
SYNTAX Unsigned32 (0..1)
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates that communication with the Receiver is available (1) or not
available (0)"
 -- 1.3.6.1.4.1.23128.1.3.3.3
::= { healthReceiver 3 }

receiverStatus OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the current status of the Receiver"
-- 1.3.6.1.4.1.23128.1.3.3.4
::= { healthReceiver 4 }

receiverCpu OBJECT-TYPE
SYNTAX Unsigned32 (0..100)
UNITS
"percent"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Percentage combined instantaneous CPU load"
-- 1.3.6.1.4.1.23128.1.3.3.5
::= { healthReceiver 5 }

receiverRamTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total RAM"
-- 1.3.6.1.4.1.23128.1.3.3.6
::= { healthReceiver 6 }

receiverRamFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Available RAM"
-- 1.3.6.1.4.1.23128.1.3.3.7
::= { healthReceiver 7 }

receiverDatabaseHDTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total HDD space partitioned for Receiver database"
-- 1.3.6.1.4.1.23128.1.3.3.8
 ::= { healthReceiver 8 }

receiverDatabaseHDFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Free HDD space available for Receiver database"
-- 1.3.6.1.4.1.23128.1.3.3.9
::= { healthReceiver 9 }

receiverTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"seconds since 1970-1-1 00:00:0.0 (GMT)"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Current system time on the Receiver"
-- 1.3.6.1.4.1.23128.1.3.3.10
::= { healthReceiver 10 }

receiverVersion OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Receiver version and buildstamp"
-- 1.3.6.1.4.1.23128.1.3.3.11
::= { healthReceiver 11 }

receiverMachineID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Machine ID of the Receiver"
-- 1.3.6.1.4.1.23128.1.3.3.12
::= { healthReceiver 12 }

receiverModel OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Receiver model number"
-- 1.3.6.1.4.1.23128.1.3.3.13
::= { healthReceiver 13 }

receiverAlertRate OBJECT-TYPE
SYNTAX Unsigned32
 UNITS
"alerts per minue"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Alert rate (per minute) for last 10 minutes"
-- 1.3.6.1.4.1.23128.1.3.3.14
::= { healthReceiver 14 }

receiverFlowRate OBJECT-TYPE
SYNTAX Integer32
UNITS
"flows per minue"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Flow rate (per minute) for last 10 minutes"
-- 1.3.6.1.4.1.23128.1.3.3.15
::= { healthReceiver 15 }

deviceStatus OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the current status of the device"
-- 1.3.6.1.4.1.23128.1.3.30.1
::= { devicehealth 1 }

deviceBypassStatus OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the current state of the device's bypass NICs"
-- 1.3.6.1.4.1.23128.1.3.30.2
::= { devicehealth 2 }

deviceBypassMode OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Indicates the devices IPS mode (IPS or IDS)"
-- 1.3.6.1.4.1.23128.1.3.30.3
::= { devicehealth 3 }

deviceCpu OBJECT-TYPE
SYNTAX Unsigned32 (0..100)
UNITS
"percent"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
 "Percentage combined instantaneous CPU load"
-- 1.3.6.1.4.1.23128.1.3.30.4
::= { devicehealth 4 }

deviceRamTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total RAM"
-- 1.3.6.1.4.1.23128.1.3.30.5
::= { devicehealth 5 }

deviceRamFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Available RAM"
-- 1.3.6.1.4.1.23128.1.3.30.6
::= { devicehealth 6 }

deviceDatabaseHDTotal OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Total HDD space partitioned for device database"
-- 1.3.6.1.4.1.23128.1.3.30.7
::= { devicehealth 7 }

deviceDatabaseHDFree OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"megabytes"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Free HDD space available for device database"
-- 1.3.6.1.4.1.23128.1.3.30.8
::= { devicehealth 8 }

deviceTime OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"seconds since 1970-1-1 00:00:0.0 (GMT)"
MAX-ACCESS read-only
STATUS current
 DESCRIPTION
"Current system time on the device"
-- 1.3.6.1.4.1.23128.1.3.30.9
::= { devicehealth 9 }

deviceVersion OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Device version information and buildstamp"
-- 1.3.6.1.4.1.23128.1.3.30.10
::= { devicehealth 10 }

deviceMachineID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Machine ID of the Device"
-- 1.3.6.1.4.1.23128.1.3.30.11
::= { devicehealth 11 }

deviceModel OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Device model number"
-- 1.3.6.1.4.1.23128.1.3.30.12
::= { devicehealth 12 }

deviceAlertRate OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"alerts per minue"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Alert rate (per minute) for last 10 minutes"
-- 1.3.6.1.4.1.23128.1.3.30.13
::= { devicehealth 13 }

deviceFlowRate OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"flows per minue"
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Flow rate (per minute) for last 10 minutes"
-- 1.3.6.1.4.1.23128.1.3.30.14
::= { devicehealth 14 }
blacklist OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Defines a request to add a blacklist or quarantine entry"
-- 1.3.6.1.4.1.23128.1.4
::= { nitroObjects 4 }

blacklistIPSName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Specifies the name of the device to which
to add the blacklist entry. If blacklistIPSID
is specified, this value is optional.
Leave this value blank when specifying
an entry for multiple IPS devices."
-- 1.3.6.1.4.1.23128.1.4.1
::= { blacklist 1 }

blacklistIPSID OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Specifies the IPSID for which the blacklist
entry is destined. A value of -1 indicates
all IPS devices for which the user has
privileges. Can be left blank when
specifying a blacklist entry is for a
particular group in blacklistGroupName."
-- 1.3.6.1.4.1.23128.1.4.2
::= { blacklist 2 }

blacklistGroupName OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Name of the device group for which the
blacklist entry is destined"
-- 1.3.6.1.4.1.23128.1.4.3
::= { blacklist 3 }

blacklistType OBJECT-TYPE
SYNTAX BlacklistTypes
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Type of list for which this entry is intended"
DEFVAL { blacklist }
-- 1.3.6.1.4.1.23128.1.4.4
::= { blacklist 4 }
blacklistIPAddress OBJECT-TYPE
SYNTAX IpAddress
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"IP address for this entry"
-- 1.3.6.1.4.1.23128.1.4.5
::= { blacklist 5 }

blacklistIPMask OBJECT-TYPE
SYNTAX Unsigned32 (0..32)
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"CIDR mask to apply to IP address (0-32).
This value is only allowed for permanent
entries with the port set to 'any' (0)."
-- 1.3.6.1.4.1.23128.1.4.6
::= { blacklist 6 }

blacklistDestinationPort OBJECT-TYPE
SYNTAX Unsigned32 (0..65535)
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Destination port for entry. 0 indicates 'any'."
DEFVAL { 0 }
-- 1.3.6.1.4.1.23128.1.4.7
::= { blacklist 7 }

blacklistDuration OBJECT-TYPE
SYNTAX Unsigned32
UNITS
"seconds"
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Duration (in seconds) for entry. 0 indicates
'permanent'. Only permanent entries
are allowed in the whitelist."
DEFVAL { 0 }
-- 1.3.6.1.4.1.23128.1.4.8
::= { blacklist 8 }

blacklistAction OBJECT-TYPE
SYNTAX BlacklistActions
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Action to perform for entry on specified
list"
DEFVAL { add }
-- 1.3.6.1.4.1.23128.1.4.9
::= { blacklist 9 }
-- Notification Types
--

nitroEvents OBJECT IDENTIFIER

-- 1.3.6.1.4.1.23128.0
::= { nitroRegMIB 0 }

-- Conformance
--

nitroConf OBJECT IDENTIFIER

-- 1.3.6.1.4.1.23128.3
::= { nitroRegMIB 3 }

-- Groups
--

nitroGroups OBJECT IDENTIFIER

-- 1.3.6.1.4.1.23128.3.1
::= { nitroConf 1 }

-- Compliance
--

nitroCompls OBJECT IDENTIFIER

-- 1.3.6.1.4.1.23128.3.2
::= { nitroConf 2 }

nitroInternalEvents OBJECT-IDENTITY
STATUS current
DESCRIPTION
"Nitro internal event notifications. Sent
by devices to alert about internal device
status changes"
-- 1.3.6.1.4.1.23128.0.4
::= { nitroEvents 4 }

nitroInternalEventGenric OBJECT-TYPE
SYNTAX OCTET STRING
MAX-ACCESS accessible-for-notify
STATUS current
DESCRIPTION
"Nitro internal event notifications. Sent
by devices to alert about internal device
status changes. Format string"
-- 1.3.6.1.4.1.23128.0.4.1
::= { nitroInternalEvents 1 }

nitroBlacklistNotify NOTIFICATION-TYPE
OBJECTS {
blacklistIPSName,
blacklistIPSID,
blacklistGroupName,
blacklistType,
blacklistIPAddress,
 blacklistIPMask,
blacklistDestinationPort,
blacklistDuration,
blacklistAction}
STATUS current
DESCRIPTION
"This is sent by an agent to notify the ESM
that an entry should be added, removed,
or modified in one or more IPS blacklists."
-- 1.3.6.1.4.1.23128.0.3
::= { nitroEvents 3 }

nitroESMHealthGroup OBJECT-GROUP
OBJECTS {
esmCpu,
esmRamTotal,
esmRamFree,
esmDatabaseHDTotal,
esmDatabaseHDFree,
esmTime,
esmVersion,
esmMachineID,
esmModel }
STATUS current
DESCRIPTION ""
-- 1.3.6.1.4.1.23128.3.1.4
::= { nitroGroups 4 }

nitroIPSHealthGroup OBJECT-GROUP
OBJECTS {
ipsName,
ipsID,
ipsConnectionAvailable,
ipsStatus,
ipsBypassStatus,
ipsMode,
ipsCpu,
ipsRamTotal,
ipsRamFree,
ipsDatabaseHDTotal,
ipsDatabaseHDFree,
ipsTime,
ipsVersion,
ipsMachineID,
ipsModel,
ipsAlertRate,
ipsFlowRate }
STATUS current
DESCRIPTION ""
-- 1.3.6.1.4.1.23128.3.1.5
::= { nitroGroups 5 }

nitroReceiverHealthGroup OBJECT-GROUP
OBJECTS {
receiverName,
receiverID,
receiverConnectionAvailable,
receiverStatus,
receiverCpu,
 receiverRamTotal,
receiverRamFree,
receiverDatabaseHDTotal,
receiverDatabaseHDFree,
receiverTime,
receiverVersion,
receiverMachineID,
receiverModel,
receiverAlertRate,
receiverFlowRate }
STATUS current
DESCRIPTION ""
-- 1.3.6.1.4.1.23128.3.1.6
::= { nitroGroups 6 }

nitroBlacklistGroup OBJECT-GROUP
OBJECTS {
blacklistIPSName,
blacklistIPSID,
blacklistGroupName,
blacklistType,
blacklistIPAddress,
blacklistIPMask,
blacklistDestinationPort,
blacklistDuration,
blacklistAction }
STATUS current
DESCRIPTION ""
-- 1.3.6.1.4.1.23128.3.1.7
::= { nitroGroups 7 }

nitroDeviceHealthGroup OBJECT-GROUP
OBJECTS {
deviceStatus,
deviceBypassStatus,
deviceBypassMode,
deviceCpu,
deviceRamTotal,
deviceRamFree,
deviceDatabaseHDTotal,
deviceDatabaseHDFree,
deviceTime,
deviceVersion,
deviceMachineID,
deviceModel,
deviceAlertRate,
deviceFlowRate }
STATUS current
DESCRIPTION "Device Health Group for the generic device health"
-- 1.3.6.1.4.1.23128.3.1.8
::= { nitroGroups 8 }

nitroNotifications NOTIFICATION-GROUP
NOTIFICATIONS {
nitroBlacklistNotify }
STATUS current
DESCRIPTION
""
-- 1.3.6.1.4.1.23128.3.1.8
 ::= { nitroGroups 8 }

nitroInternalEventsGroup OBJECT-GROUP
OBJECTS {
nitroInternalEventGenric }
STATUS current
DESCRIPTION
""
-- 1.3.6.1.4.1.23128.3.1.9
::= { nitroGroups 9 }
END