Fortinet 400 manual Customizing replacement messages, FortiGate traps, 164

Customizing replacement messages		System configuration
	Table 1: FortiGate MIBs
	MIB file name	Description
	FORTINET.mib	The Fortinet MIB is a proprietary MIB that includes detailed FortiGate
		system configuration information. Add this MIB to your SNMP manager to
		monitor all FortiGate configuration settings.
	RFC1213.mib	The RFC 1213 MIB is the standard MIB-II MIB that describes network
		management protocols for TCP/IP networks.

FortiGate traps

The FortiGate agent can send traps to up to three SNMP trap receivers on your network that are configured to receive traps from the FortiGate unit. For these SNMP managers to receive traps, you must load and compile the Fortinet trap MIB onto the SNMP manager. The FortiGate agent sends the traps listed in Table 2.

Table 2: FortiGate traps

Trap message	Description
The <interface_name> Interface IP	The IP address of an interface of a FortiGate unit has
is changed to <new_IP> (Fortigate	changed. The trap message includes the name of the
Serial No.: <FortiGate_serial_no>)	interface for which the IP address changed, the new IP
	address of the interface, and the serial number of the
	FortiGate unit. This trap can be used to track interface
	IP address changes for interfaces configured with
	dynamic IP addresses set using DHCP or PPPoE.
System Down	The FortiGate unit is shutting down.
Agent Down	An administrator has disabled the SNMP agent. This
	trap is also sent when the agent stops before a system
	shutdown.
Cold Start	The FortiGate unit starts or restarts. An administrator
	enables the SNMP agent or changes FortiGate SNMP
	settings. This trap is sent when the agent starts during
	system startup.
Authentication failure	An SNMP manager community string does not match
	the FortiGate get community string

Customizing replacement messages

Replacement messages are added to content passing through the firewall to replace:

•Files or other content removed from email messages by the antivirus system

•Files or other content removed from HTTP downloads by the antivirus system or web filtering

•Files removed from FTP downloads by the antivirus system

You can edit replacement messages to control the content of these messages when they are received by a user.

You can also edit the content added to alert email messages to control the information that appears in alert emails for virus incidents, NIDS events, critical system events, and disk full events.

164 Fortinet Inc.