SNMP (Simple Network Management Protocol) gives access to Sophos Firewall information, for example, status of the firewall, service availability, CPU, memory, and disk usage. Sophos Firewall supports SNMPv3, SNMPv1 and SNMPv2c protocols.
- To configure Sophos Firewall as an SNMP agent, select Enable SNMP agent and specify the settings.
- To add an SNMPv1 and SNMPv2c community, select Add.
- To add an SNMPv3 user, select Add. You can’t change the username later.
You can configure Sophos Firewall as an SNMP agent. It sends traps (alerts) of system-generated events to SNMP managers within its community and to specified SNMPv3 users. It also responds to the different SNMP queries triggered by the managers.
SNMPv1 and SNMPv2c community and traps
You can configure SNMPv1 and SNMPv2c communities. Sophos Firewall communicates with the SNMP managers within its communities.
SNMPv3 users and traps
You can add an SNMPv3 user and the authorized hosts. You can specify encryption and authentication settings to ensure confidentiality, message integrity, and user validity.
Sophos Firewall supports SNMPv3 inform requests (acknowledgement based traps) for SNMPv3 users. The SNMP manager sends an acknowledgement when it receives an SNMP inform from Sophos Firewall. If Sophos Firewall doesn't get a response from the SNMP manager, it won't try to resend the inform.
MIB and OIDs
The Management Information Base (MIB) contains the list of OIDs that Sophos Firewall supports. You need to add the MIB to your SNMP managers and authorized hosts. Download Sophos MIB.
OIDs (Object Identifiers) help you identify the events in traps. Sophos Firewall supports the following standard OIDs:
- IF-MIB [Counter32 and Counter64 supported]