Use the CLI commands in this topic to set up the default configuration for SNMP notifications.
Go to CLI configuration mode:
hostname > enablehostname # configure terminalEnable SNMP notifications:
hostname (config) # fenotify snmp enableSpecify the default delivery schedule for SNMP notifications:
Note
Trellix recommends using
per-eventnotifications.To receive a daily notification for each entity that was the source of the event, enter:
hostname (config) # fenotify snmp default delivery daily-per-sourceTo receive an hourly notification for each entity that was the source of the event, enter:
hostname (config) # fenotify snmp default delivery hourly-per-sourceTo receive a notification every minute for each entity that was the source of the event, enter:
hostname (config) # fenotify snmp default delivery per-1min-per-sourceTo receive a notification every 5 minutes for each entity that was the source of the event, enter:
hostname (config) # fenotify snmp default delivery per-5min-per-sourceTo receive information about each event, sent when the event is triggered, enter:
hostname (config) # fenotify snmp default delivery per-event
Specify the SNMP version used for notifications:
To use SNMP version 1, enter:
hostname (config) # fenotify snmp default version 1To use SNMP version 2c, enter:
hostname (config) # fenotify snmp default version 2c
If you are going to download the MIB file, see the procedure that follows for Microsoft Windows, Linux, or Mac devices. The MIB file is retrieved using a program that connects using port 22, which is normally used for tools like SSH, SCP, and PSCP. Because file-level access is denied by policy, the direct path to the MIB file needs to be specified.
Save the configuration:
hostname (config) # write memory
Download the pscp.exe tool (available from PuTTY download page).
Navigate to a command prompt window.
Change to the directory in which you downloaded the pscp.exe tool:
cd DownloadsCopy the MIB file from the Central Management System appliance:
pscp.exe -r -scp admin@<CMSeriesIPaddress>:/usr/share/snmp/mibs \Temp\mibs\When prompted for the password, enter
admin.The file is copied to the
\Temp\mibsdirectory that resides on your desktop.Change to the “mibs” directory:
cd C:\Temp\mibsLoad the MIB file into an SNMP browser or tool or open the MIB file with the following command:
FE-FIREEYE-MIB.txt
Using the OpenSSH client, copy the MIB file from the Central Management System appliance:
scp -r admin@<CMSeriesIPaddress>:/usr/share/snmp/mibs /usr/<userDirectoryName>/When prompted for the password, enter
admin.The files are copied to the “mibs” directory that resides in the
/usr/<userDirectoryName>directory.Change to the “mibs” directory:
cd mibsLoad the MIB file into an SNMP browser or tool or open the MIB file with the following command:
vi FE-FIREEYE-MIB.txt
Navigate to the terminal emulator.
Copy the MIB file from the Central Management System appliance:
scp -r admin@<CMSeriesIPaddress>:/usr/share/snmp/mibs ~/When prompted for the password, enter
admin.The files are copied to the “mibs” directory that resides in the user directory.
Load the MIB file into an SNMP browser or tool or open the MIB file with the following command:
vi ~/mibs/FE-FIREEYE-MIB.txt