Fortinet 586 FortiWeb 5.0 Patch 6 Administration Guide

MIB support

The FortiWeb SNMP agent supports a few management information blocks (MIBs).
You can obtain these MIB files from the Fortinet Technical Support web site,
https://support.fortinet.com/.
To communicate with your FortiWeb appliance’s SNMP agent, you must first compile these
MIBs into your SNMP manager. If the standard MIBs used by the SNMP agent are already
compiled into your SNMP manager, you do not have to compile them again.
To view a trap or query’s name, object identifier (OID), and description, open its MIB file in a
plain text editor.
All traps sent include the message, the FortiWeb appliance’s serial number, and host name.
For instructions on how to configure traps and queries, see “SNMP traps & queries” on
page 580.
See also
SNMP traps & queries
Reports
FortiWeb can generate reports based upon:
auto-learning data collected by policies (see “Auto-learning” on page 151)
traffic statistics collected by policies (see “Data analytics” on page 598 and “Bot analysis”
on page 605)
attack, event, and traffic log messages
vulnerability scans for PCI compliance
Table 54:Supported MIBs
MIB or RFC Description
Fortinet Core MIB This Fortinet-proprietary MIB enables your SNMP manager to query for
system information and to receive traps that are common to multiple
Fortinet devices.
FortiWeb MIB This Fortinet-proprietary MIB enables your SNMP manager to query for
FortiWeb-specific information such as the utilization of each CPU, and
to receive FortiWeb-specific traps, such as when an attack is detected
by a signature.
RFC-1213 (MIB II) The FortiWeb SNMP agent supports MIB II groups, except:
There is no support for the EGP group from MIB II (RFC 1213,
section 3.11 and 6.10).
Protocol statistics returned for MIB II groups (IP, ICMP, TCP, UDP,
and so on.) do not accurately capture all FortiWeb traffic activity.
More accurate information can be obtained from the information
reported by the FortiWeb MIB.
RFC-2665
(Ethernet-like MIB)
The FortiWeb SNMP agent supports Ethernet-like MIB information,
except the dot3Tests and dot3Errors groups.