Configuring SNMP settings using the CLI

Prev Next

Use the CLI commands in this topic to set up the default configuration for SNMP notifications.

To configure SNMP settings:
  1. Go to CLI configuration mode:

    hostname > enable

    hostname # configure terminal

  2. Enable SNMP notifications:

    hostname (config) # fenotify snmp enable

  3. Specify the default delivery schedule for SNMP notifications:

    Note

    Trellix recommends using per-event notifications.

    • To receive a daily notification for each entity that was the source of the event, enter:

      hostname (config) # fenotify snmp default delivery daily-per-source

    • To receive an hourly notification for each entity that was the source of the event, enter:

      hostname (config) # fenotify snmp default delivery hourly-per-source

    • To receive a notification every minute for each entity that was the source of the event, enter:

      hostname (config) # fenotify snmp default delivery per-1min-per-source

    • To receive a notification every 5 minutes for each entity that was the source of the event, enter:

      hostname (config) # fenotify snmp default delivery per-5min-per-source

    • To receive information about each event, sent when the event is triggered, enter:

      hostname (config) # fenotify snmp default delivery per-event

  4. Specify the SNMP version used for notifications:

    • To use SNMP version 1, enter:

      hostname (config) # fenotify snmp default version 1

    • To use SNMP version 2c, enter:

      hostname (config) # fenotify snmp default version 2c

  5. If you are going to download the MIB file, see the procedure that follows for Microsoft Windows, Linux, or Mac devices. The MIB file is retrieved using a program that connects using port 22, which is normally used for tools like SSH, SCP, and PSCP. Because file-level access is denied by policy, the direct path to the MIB file needs to be specified.

  6. Save the configuration:

    hostname (config) # write memory

To download the Trellix MIB for SNMP on Windows:
  1. Download the pscp.exe tool (available from PuTTY download page).

  2. Navigate to a command prompt window.

  3. Change to the directory in which you downloaded the pscp.exe tool:

    cd Downloads

  4. Copy the MIB file from the Central Management System appliance:

    pscp.exe -r -scp admin@<CMSeriesIPaddress>:/usr/share/snmp/mibs \Temp\mibs\

  5. When prompted for the password, enter admin.

    The file is copied to the \Temp\mibs directory that resides on your desktop.

  6. Change to the “mibs” directory:

    cd C:\Temp\mibs

  7. Load the MIB file into an SNMP browser or tool or open the MIB file with the following command:

    FE-FIREEYE-MIB.txt

To download the MIB for SNMP on Linux:
  1. Using the OpenSSH client, copy the MIB file from the Central Management System appliance:

    scp -r admin@<CMSeriesIPaddress>:/usr/share/snmp/mibs /usr/<userDirectoryName>/

  2. When prompted for the password, enter admin.

    The files are copied to the “mibs” directory that resides in the /usr/<userDirectoryName> directory.

  3. Change to the “mibs” directory:

    cd mibs

  4. Load the MIB file into an SNMP browser or tool or open the MIB file with the following command:

    vi FE-FIREEYE-MIB.txt

To download the MIB for SNMP on macOS:
  1. Navigate to the terminal emulator.

  2. Copy the MIB file from the Central Management System appliance:

    scp -r admin@<CMSeriesIPaddress>:/usr/share/snmp/mibs ~/

  3. When prompted for the password, enter admin.

    The files are copied to the “mibs” directory that resides in the user directory.

  4. Load the MIB file into an SNMP browser or tool or open the MIB file with the following command:

    vi ~/mibs/FE-FIREEYE-MIB.txt