Can I monitor the state of an IPSec tunnel on my pix with snmp?

[mrouch]

I have managed to get a pix firewall to communicate with an snmp monitor on the far side of a vpn tunnel. I would like to use snmp to monitor the state of the vpn tunnels on my pixes (even something as simple as "current state = QM_IDLE", for example) but I've been unable to find anything that would allow me to do that. The only MIBS that show up on my snmp monitor are for general system info (contact information, etc) and interface status. Is there a way to monitor a pix's vpn tunnels using snmp?

[umedryk]

Yes, you can monitor PIX thro' SNMP, provided you have appropriate MIBs.

[mrouch]

Where would I get the appropriate MIBs? Can they be downloaded and applied to the pix? The default MIBs do not give information on tunnel state, or any other aspect of the vpn tunnels, for that matter.

Thanks.

[dherman]

I love people who give answers like that and refuse to give details.....

You CANNOT monitor individual tunnel status using current PIX 6.3 (4) firmware.... does not support it.....

Unless the genius who answered you above cares to further his/her claim......