Send SNMP Trap Assertion
The Send SNMP Trap assertion allows you to instruct the Gateway to broadcast a Simple Network Management Protocol (SNMP) trap. When the Send SNMP Trap assertion is encountered in a policy execution path, an SNMP trap event will be broadcast to a predefined network address. The assertion is typically used to trigger an alert based on the result of a previous assertion.
gateway90
The
Send SNMP Trap
assertion allows you to instruct the Gateway to broadcast a Simple Network Management Protocol (SNMP) trap. When the Send SNMP Trap assertion is encountered in a policy execution path, an SNMP trap event will be broadcast to a predefined network address. The assertion is typically used to trigger an alert based on the result of a previous assertion.For example, two assertions can be combined into a logical "At least one assertion must evaluate to true"assertion folder, the first assertion requiring validation, the later being the Send SNMP Trap assertion. If the assertion requiring validation fails, then the Send SNMP Trap assertion will execute, hence broadcasting the alert.
There are two types of SNMP traps: v1 and v2. The Send SNMP Trap assertion sends a "v2" trap.
Using the Assertion
- Do one of the following:
- To add the assertion to the Policy Development window, see Add an Assertion.
- To change the configuration of an existing assertion, proceed to step 2 below.
- When adding the assertion, the SNMP Properties automatically appear; when modifying the assertion, right-clickSend SNMP Trap to...in the policy window and selectSNMP Trap Propertiesor double-click the assertion in the policy window. The assertion properties are displayed.
- Configure the properties as follows:SettingDescriptionSNMP HostnameEnter the network address that should receive the SNMP alert. You may reference context variables.SNMP PortThe default SNMP trap destination port is set to "162". This is the IANA (Internet Assigned Numbers Authority) standard SNMP trap port. To configure a different port, select theCustomoption and enter an alternate port number.SNMP CommunityOptionally enter the SNMP community that should be used by the SNMP trap. You may reference context variables.By default, the community name is obfuscated to protect your privacy. To see the actual name, select the [Show community] check box.Although you may enter the actual community name here, it is recommended that you define the name as a secure password reference instead , for improved security. (An on-screen warning reminds you of this.) To do this, enter the community name through the Manage Stored Passwords task and then reference it here using the${secpass.<name>.plaintext}context variable. This will prevent attackers from capturing the community name and then sending traps impersonating the Gateway.Text to SendOptionally enter some text to send in the SNMP trap. You may reference context variables within the trap message, if necessary.OID to SendComplete the OID of the SNMP trap. This is used for identification purposes on a network. You may reference context variables.If the OID entered is invalid, a value of '1' will be used instead.
- Click [OK]when done.