beautypg.com

Fortigate traps, Customizing replacement messages – Fortinet FortiGate 100 User Manual

Page 136

background image

136

Fortinet Inc.

FortiGate traps

System configuration

FortiGate traps

The FortiGate agent can send traps to up to three SNMP trap receivers on your
network that are configured to receive traps from the FortiGate unit. For these SNMP
managers to receive traps, you must load and compile the Fortinet trap MIB onto the
SNMP manager. The FortiGate agent sends the traps listed in

Table 2

.

Customizing replacement messages

Replacement messages are added to content passing through the firewall to replace:

• Files or other content removed from email messages by the antivirus system
• Files or other content removed from HTTP downloads by the antivirus system or

web filtering

• Files removed from FTP downloads by the antivirus system

You can edit replacement messages to control the content of these messages when
they are received by a user.

You can also edit the content added to alert email messages to control the information
that appears in alert emails for virus incidents, NIDS events, critical system events,
and disk full events.

FORTINET.mib

The Fortinet MIB is a proprietary MIB that includes detailed FortiGate

system configuration information. Add this MIB to your SNMP manager to

monitor all FortiGate configuration settings.

RFC1213.mib

The RFC 1213 MIB is the standard MIB-II MIB that describes network

management protocols for TCP/IP networks.

Table 1: FortiGate MIBs

MIB file name

Description

Table 2: FortiGate traps

Trap message

Description

The Interface IP

is changed to (Fortigate

Serial No.: )

The IP address of an interface of a FortiGate unit has

changed. The trap message includes the name of the

interface for which the IP address changed, the new IP

address of the interface, and the serial number of the

FortiGate unit. This trap can be used to track interface

IP address changes for interfaces configured with

dynamic IP addresses set using DHCP or PPPoE.

System Down

The FortiGate unit is shutting down.

Agent Down

An administrator has disabled the SNMP agent. This

trap is also sent when the agent stops before a system

shutdown.

Cold Start

The FortiGate unit starts or restarts. An administrator

enables the SNMP agent or changes FortiGate SNMP

settings. This trap is sent when the agent starts during

system startup.

Authentication failure

An SNMP manager community string does not match

the FortiGate get community string