topic SNMP and WSA in Web Security

SNMP and WSA

spacemeb — Mon, 10 Oct 2022 13:03:44 GMT

Hello,

According to the documentation, I enabled snmp traps with snmpconfig.

I also found some OIDs which can be helpful for polling.

Client Requests / Second
- cacheThruputNow (.1.3.6.1.4.1.15497.1.2.3.7.1.1)
- Request throughput in the last minute
Response Time
- cacheTotalRespTimeNow (.1.3.6.1.4.1.15497.1.2.3.7.9.1)
- Cache total response time in the last minute
CPU Usage
- cacheBusyCpuUsage (.1.3.6.1.4.1.15497.1.2.3.1.5)
- Percentage busy time of the CPU

Is there anything else that I should be aware?

Where should I find a full list with OIDs for WSA?

Thanks in advance!

Re: SNMP and WSA

amojarra — Mon, 10 Oct 2022 15:11:07 GMT

Hi @spacemeb

Here is the list of all MIBs for WSA : https://www.cisco.com/web/ironport/tools/web/10.1.2/asyncosweb-mib.txt

You can find the parent link here if you need this for SMA and ESA :

Cisco Secure Web Appliance - Cisco

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++ If you find this answer helpful, please rate it as such ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

Re: SNMP and WSA

spacemeb — Tue, 11 Oct 2022 11:04:44 GMT

Hello again,

Do we have specific OIDs/sequence of numbers? I would like a full list of it.

Re: SNMP and WSA

Ken Stieers — Tue, 11 Oct 2022 11:30:38 GMT

The MIB files are the whole list of what's available via SNMP

You may need to find a mib browser to help you make sense of it.

Heres a link to a bunch of free ones.
https://www.easysnmp.com/tools/snmp-browsers/

Re: SNMP and WSA

balaji.bandi — Tue, 11 Oct 2022 11:41:22 GMT

As per i know there is a limited OID to monitor using SNMP WSA.

as you are already visited the page :

https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118421-technote-wsa-00.html

download MIB as suggested and do snmpwalk to get more informaton.

Re: SNMP and WSA

spacemeb — Wed, 12 Oct 2022 11:11:28 GMT

Hello,

So the monitoring occurs from the traps that are configured to be sent.

Also, we have the limited OIDs that you told me, right?

OK, understood!

Re: SNMP and WSA

balaji.bandi — Wed, 12 Oct 2022 12:16:38 GMT

yes thats correct. hope that help you. (unlike other devices we have only limited here)