fenotify snmp

Prev Next

Enables Simple Network Management Protocol (SNMP) notifications. This command is available for the Network Security, Malware Analysis, and Email MPS appliances. The event option is available on the Network Security.

Note

This command enables alert notifications. Use the snmp-server host command to enable system notifications.

Syntax

[no] fenotify snmp {alert | default {delivery | provider} | enable | trap-sink}

[no] fenotify snmp alert<alert-type>enable

[no] fenotify snmp enable

[no] fenotify snmp default deliverydelivery-method

[no] fenotify snmp default versionsnmp-version

[no] fenotify snmp trap-sinksink_name

fenotify snmp trap-sinksink_nameenable

fenotify snmp trap-sinksink_nameaddressip_address

fenotify snmp trap-sinksink_namecommunitycommunity_name

fenotify snmp trap-sinksink_nameprefer message deliverydelivery-method

fenotify snmp trap-sinksink_nameprefer notificationevent-type

fenotify snmp trap-sinksink_nameversionsnmp-version

fenotify snmp trap-sinksink_nameuseruser_name

Parameters

<alert-type>

Type of notification:

  • domain-match—Notification of domain-match event.

  • infection-match—Notification of infection match events.

  • ips-event—Notification of IPS events. Supported on IPS-enabled appliances only.

  • malware-callback—Notification of malware callback events.

  • malware-object—Notification of malware object events.

  • riskware-callback—Notification of riskware callback events.

  • riskware-infection—Notification of riskware infection events.

  • riskware-object—Notification of riskware object events.

  • smartvision-event—(On a SmartVision appliance) Notification of SmartVision events.

  • web-infection—Notification of Web infection events.

delivery-method

The following default delivery schedules are supported:

  • daily-digest—Information about all events detected in the past 24 hours.

  • per-event—Information about each event, sent when the event is triggered.

  • daily-per-source—Information about all events detected in the past 24 hours, with one notification sent for each source IP.

  • hourly-per-source—Information about all events detected in the past hour, with one notification sent for each attacker (source).

  • per-1min-per-source—Information about all events detected in the past minute, with one notification sent for each source IP.

  • per-5min-per-source—Information about all events detected in the past 5 minutes, with one notification sent for each source IP.

sink-name

A convenient name (nickname) for the SNMP trap sink.

snmp-version

SNMP version used for notifications: 1c or 2c.

ip_address

IP address of the trap sink.

community_name

SNMP community string.

user_name

Username of the notification recipient.

Example

The following example enables SNMP notifications to the “ABC” trap-sink.

hostname (config)# fenotify snmp trap-sink ABC enable