CISCO-SSL-PROXY-MIB Download
This MIB module is for managing a Secure Socket Layer
(SSL) Proxy device which terminates and accelarates
SSL and Transport Layer Security (TLS) transactions.
The proxy device can act as a SSL server or a SSL client
depending on the configuration and the application.
In one application, the device acts as a proxy SSL
server. It terminates SSL handshakes and TCP connections
initiated by SSL clients. The device is configured with
a key and a certificate bearing the identity of the SSL
server. The device uses this identity to establish the
SSL session on behalf of the server, offloading the key
establishment and data encryption and decryption work.
After the SSL session has been successfully established
between the client and the proxy device, the device
starts to receive and decrypt the encrypted data sent
from the client and forward to the server. The device
forwards the clear data to the server on a backend
connection. Clear data sent from the server is encrypted
by the proxy device before it is forwarded to the SSL
client.
Optionally, the proxy device is configured to reencrypt
the decrypted data sent from the client to the server.
The proxy device acts as a SSL client to initiate a SSL
session to the server. The decrypted data is encrypted
within this SSL session to be forwarded to the server.
The encrypted data sent from the server to the device
is decrypted and then reencrypted before it is
forwarded to the client.
In another application, the proxy device forwards data
generated by one or more sources to the destination
via a SSL session. The proxy device acts as a SSL
client and intiates a SSL session to the next hop
device. When data is received from the source, the
proxy device forwards the data to the next hop using
the SSL session. The next hop can continue to forward
the data if it is not the destination.
The proxy device supports a number of proxy services.
Each proxy service defines the role of the proxy device,
whether it acts as a SSL server or a SSL client. The
rest of the configuration include cryptographic and
protocol parameters.
This MIB is used for monitoring the configuration,
statuses and statistics of the proxy services and
the protocols including TCP, SSL and TLS.
IPHost Network Monitor offer an easy way of SNMP monitoring your Cisco Servers, Routers, Switches, Bridges,
Firewalls, Repeaters.
OID list for CISCO-SSL-PROXY-MIB
- cspGcVersion
- The version information of the SSL proxy device, for display only.
- cspGcFIPSMode
- An indication of whether or not the proxy device is operating in FIPS (Federal Information Processing Standards) approved mode. If 'true', the proxy device is operating in FIPS mode. When the device operates in FIPS mode, only approved cryptographic algor ...
- cspGcRSArc4128md5
- An indication of whether or not the proxy device supports the cipher suite RSA_WITH_RC4_128_MD5. If 'true', the cipher suite is supported.
- cspGcRSArc4128sha
- An indication of whether or not the proxy device supports the cipher suite RSA_WITH_RC4_128_SHA. If 'true', the cipher suite is supported.
- cspGcRSAdescbcsha
- An indication of whether or not the proxy device supports the cipher suite RSA_WITH_DES_CBC_SHA. If 'true', the cipher suite is supported.
- cspGcRSA3descbcsha
- An indication of whether or not the proxy device supports the cipher suite RSA_WITH_3DES_EDE_CBC_SHA. If 'true', the cipher suite is supported.
- cspGcNotifyProxyServOperStatus
- An indication of whether or not a cspServOperStatus notification should be issued when the operation status of proxy services changes. If such a notification is desired, it is the responsibility of the management entity to ensure that the SNMP administrat ...
- cspGcNotifyPSCertExpiring
- An indication of whether or not a cspServCertExpiring notification should be issued when a proxy service certificate will be expiring in the configured time interval cspGcPSCertExpireInterval. If such a notification is desired, it is the responsibility of ...
- cspGcPSCertExpireInterval
- The proxy service certificate expiration time interval, used to determine when the cspServCertExpiring notification should be issued if cspGcNotifyPSCertExpiring is 'true'. If this time interval is 0, no proxy service certification expiration will be chec ...
- cspPsTable
- A list of proxy service configuration entries.
- cspPsEntry
- The proxy service configuration entry. Each entry indicates the name and the index of a proxy service, and a set of configuration parameters to be applied on this proxy service. A unique name can be assigned to each proxy service. Optionally, multiple pro ...
- cspPsName
- The name of a proxy service. A unique name string can be assigned to one proxy service or a list of proxy services. When the name is assigned to a list of proxy services, each proxy service is identified by a unique index within the list.
- cspPsListIndex
- The unique index of a proxy service within a list. If the cspPsName string is assigned to a list of proxy services, this index is used to identify a proxy service within the list. If the cspPsName string is unique per proxy service, this index is not used ...
- cspPsServiceType
- The type of proxy service: 'server(1)' or 'client(2)'. When servicing a 'server' type proxy service, the proxy device acts as a SSL server. It terminates the SSL handshake initiated by a SSL client, and forwards the data sent from the client to the destin ...
- cspPsVirtualAddressType
- An indication of the type of address contained in cspPsVirtualAddress.
- cspPsVirtualAddress
- The virtual address. This address is used by the data source to send data that can be received by the proxy device and forwarded to the destination.
- cspPsVirtualPort
- The virtual TCP port number. This port number is used by the data source to send data that can be received by the proxy device and forwarded to the destination.
- cspPsServerAddressType
- An indication of the type of address contained in cspPsServerAddress.
- cspPsServerAddress
- The server address. This address is used by the proxy device to send or forward data to the destination.
- cspPsServerPort
- The server TCP port number. This port number is used by the proxy device to send or forward data to the destination.
- cspPsAdminStatus
- The administrative status of the proxy service. Each proxy service can be configured to be administratively 'up' or 'down'. If the Adminstrative Status is 'down', the service will not be operational.
- cspPsOperStatus
- The operational status of a proxy service. For a proxy service to be operational, its administrative status needs to be 'up'. If the administrative status is 'up', the operational status will be changed from 'down' to 'up' automatically once all the requ ...
- cspPsOperDownReason
- The reason for the operational status to be 'down'. Possible values are: other(1) : Unknown or undefined reason, notApplicable(2) : Administratively 'down', noConnectivity(3) : No Connectivity to the client, the server, or the gateway, noV ...
- cspPsConfigRowStatus
- The conceptual row status of the proxy service configuration entry. An entry cannot have the status 'active' until values have been assigned to the following objects: cspPsVirtualAddress, cspPsVirtualPort, cspPsServerAddress and cspPsServerPort. This entr ...
- cspPsPolicyTable
- A list of proxy service policy configuration entries.
- cspPsPolicyEntry
- The proxy service policy entry. Each proxy service policy entry contains the name of each type of policy configured for the proxy service. A policy is a set of configuration parameters and rules to observe for implementing a protocol or an operation. One ...
- cspPspVirTcpPolicyName
- The name of the TCP protocol policy configured for the virtual side connections. If no TCP policy is configured, the name will be a NULL string.
- cspPspSerTcpPolicyName
- The name of the TCP protocol policy configured for the server side connections. If no TCP policy is configured, the name will be a NULL string.
- cspPspSslPolicyName
- The name of the SSL protocol policy configured for the SSL handshake and data encryption and decryption. If no SSL policy is configured, the name will be a NULL string.
- cspPspHttpHdrPolicyName
- The name of the HTTP header insertion policy. A number of fields can be inserted into the HTTP headers when the proxy service is forwarding data. The policy specifies the header insertion parameters. If no policy is configured, the name will be a NULL str ...
- cspPspUrlRewritePolicyName
- The name of the URL rewrite policy. The policy specifies configuration parameters for rewriting URLs in HTTP headers and payload. If no policy is configured, the name will be a NULL string.
- cspPsKeyCertTable
- A list of proxy service key and certificate configuration entries.
- cspPsKeyCertEntry
- The proxy service key and certificate configuration entry. This entry specifies the key usage, optionally the trust point name, the certificate and the key file names, the key size and time of generation or import, and some important attributes of the cer ...
- cspPskcKeyUsage
- An indication of the usage of a key assigned to a proxy service. Each proxy service can be assigned one or more keys. The key can be used for signing only, for data encryption and decryption only, or for general purpose (that is, it can be used for both s ...
- cspPskcTrustPointName
- The name of a trust point assigned to the proxy service. The trust point contains information that can be used for certificate enrollment or for importing keys and certificates. A trust point may also contain identifying information about keys and certifi ...
- cspPskcCertFileName
- The name of the file storing the certificate. If there is no such file, the name will be a NULL string.
- cspPskcKeyName
- The name of a key assigned to the proxy service. If there is no key assigned, the name will be a NULL string. If the key is stored in a file, the file name may be used to identify the key, and this name will be a NULL string.
- cspPskcKeyFileName
- The name of the file storing the key. If there is no such file, the name will be a NULL string.
- cspPskcKeySize
- The size of the key. The following modulus sizes are defined for RSA keys: 512-bit, 768-bit, 1024-bit, 1536-bit and 2048-bit.
- cspPskcKeyTime
- The time of generation of the key, if known. If the key is imported to the proxy device, this time can indicate the time of import if the time of generation is unknown. If the time is not known, this will be a NULL string.
- cspPskcCertStatus
- The status of the certificate that is used to publish the public key. The following values are defined: Valid(1) : Certificate is valid, Expired(2) : Certificate has expired, Rolling Over(3): Certificate is being renewed. Whether or not an expir ...
- cspPskcCertSubjName
- The subject name of the certificate assigned to the proxy service. If there is no subject name on the certificate, this will be a NULL string.
- cspPskcCertSerialNum
- The serial number of the certificate assigned to the proxy service. If there is no serial number on the certificate, this will be a NULL string.
- cspPskcIssuerName
- The issuer name of the certificate assigned to the proxy service. If the issuer name of the certificate is not known, this will be a NULL string.
- cspPskcIssuerCertSerialNum
- The serial number of the issuer's certificate. If the serial number of the issuer's certificate is not known, this will be a NULL string.
- cspPskcCertStartDate
- The time when the certificate starts to be valid, corresponding to the notBefore time on the certificate.
- cspPskcCertEndDate
- The time when the certificate validity ends, corresponding to the notAfter time on the certificate.
- cspPskcConfigRowStatus
- The conceptual row status of the proxy service key and certificate configuration entry. This entry can be modified when the status is 'active'.
- cspTcpPolicyTable
- A list of TCP Policy entries
- cspTcpPolicyEntry
- TCP Policy configuration entry. Each entry defines a set of TCP protocol parameters. A policy can be applied to one or more proxy services.
- cspTpPolicyName
- The unique name of a TCP policy.
- cspTpSynTimeOut
- The TCP connection SYN timeout value. This is the amount of time the SSL proxy waits before failing the connection establishment attempt.
- cspTpInActivityTimeOut
- The TCP connection inactivity timeout value. This is the amount of time the SSL proxy waits for the next packet to arrive on a TCP connection, if no packet is received within this period then the connection is considered to be inactive and aborted.
- cspTpNagleAlgo
- If 'true', the Nagle Algorithm is enabled during the SSL or TLS data phase to concatenate a number of small messages to avoid sending small messages into the network.
- cspTpFinWaitTimeOut
- The TCP connection FIN-WAIT2 state timeout value. This is the amount of time the SSL proxy waits for a FIN from the peer after it has initiated close and is in FIN-WAIT2 state.
- cspTpReassemTimeOut
- The TCP connection reassembly timeout value. This is the amount of time the SSL proxy waits during the TCP out of order traffic reassembly process for the next expected in sequence segment to arrive.
- cspTpRcvBufShrLim
- The receive buffer share limit per connection. This is used by SSL proxy to calculate the maximum window to advertise during the 3 way handshake, and is also the maximum share of the receive buffer pool that would be allocated for this connection.
- cspTpTransBufShrLim
- The transmit buffer share limit per connection. This is the maximum share of the send buffer pool that would be allocated for this connection.
- cspTpMss
- The TCP maximum segment size. This is the MSS value offered by the SSL proxy during 3-way handshake
- cspTpPathMtuDisc
- If 'true', the Path MTU Discovery algorithm is enabled.
- cspTpConfigRowStatus
- The conceptual row status of the TCP policy configuration entry. This entry can be modified when the status is 'active'.
- cspSslPolicyTable
- A list of SSL protocol policy configuration entries.
- cspSslPolicyEntry
- A SSL policy defines a set of cipher suites to be supported, and the SSL or TLS protocol parameters. Each policy can be assigned to one or more proxy services. If no SSL policy is assigned to a proxy service, all supported cipher suites and all protocol v ...
- cspSpPolicyName
- The unique name of a SSL protocol policy.
- cspSpRSArc4128md5
- An indication of whether or not the cipher suite RSA_WITH_RC4_128_MD5 is configured. If 'true', the cipher suite is configured.
- cspSpRSArc4128sha
- An indication of whether or not the cipher suite RSA_WITH_RC4_128_SHA is configured. If 'true', the cipher suite is configured.
- cspSpRSAdescbcsha
- An indication of whether or not the cipher suite RSA_WITH_DES_CBC_SHA is configured. If 'true', the cipher suite is configured.
- cspSpRSA3descbcsha
- An indication of whether or not the cipher suite RSA_WITH_3DES_EDE_CBC_SHA is configured. If 'true', the cipher suite is configured.
- cspSpProtocol
- The set of SSL and TLS protocols to be supported. The following values are defined: other(1) : An unspecified protocol, SSL 3.0(2) : Support SSL 3.0 protocol only, TLS 1.0(3) : Support TLS 1.0 protocol only, ssl3AndTls1(3) : Support both ...
- cspSpCloseProtocol
- An indication of whether or not the SSL close protocol is enforced. If 'true', the close protocol is enforced. A close-notify alert message is sent to the peer, and a close-notify alert message is expected from the peer. If 'false', the close protocol is ...
- cspSpSessionCache
- The SSL session cache size. The session cache is used to store a number of most recently used session identifiers. Session identifiers can be reused if a new connection requests to use a session identifier that is found in the cache. This object specifies ...
- cspSpSessionTimeOut
- The SSL session timeout value. The session entry will be removed from the session cache after the configured timeout. Once the session entry is removed, subsequent connections cannot reuse the session. If this timeout value is 0, entries in the session ca ...
- cspSpConfigRowStatus
- The row status of the SSL policy configuration entry. This entry can be modified when the status is 'active'.
- cspTcpCountersClearTime
- The last time when the TCP counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
- cspTcConnInit
- The total number of TCP connections initiated by the proxy device.
- cspTcConnAccept
- The total number of TCP connections accepted by the proxy device.
- cspTcConnEstab
- The total number of TCP connections established.
- cspTcConnDrop
- The total number of TCP connections dropped.
- cspTcConnClosed
- The total number of TCP connections closed.
- cspTcSynTimeOuts
- The total number of SYN timeouts.
- cspTcIdleTimeOuts
- The total number of idle timeouts.
- cspTcTotalPktSent
- The total number of TCP packets sent.
- cspTcDataPktSent
- The total number of TCP data packets sent.
- cspTcDataByteSent
- The total amount of data sent.
- cspTcTotalPktRcv
- The total number of TCP packets received.
- cspTcPktRcvSeq
- The total number of TCP data packets received in sequence.
- cspTcByteRcvSeq
- The total amount of data received in sequence.
- cspSslCountersClearTime
- The last time when the SSL counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
- cspScConnAttempt
- The total number of SSL connections attempted.
- cspScConnComplete
- The total number of SSL connections completed.
- cspScConnInHandShake
- The number of SSL connections currently in handshake phase.
- cspScConnInDataPhase
- The number of SSL connections currently in data phase.
- cspScRenegAttempt
- The total number of SSL renegotiations attempted.
- cspScConnInReneg
- The number of SSL connections currently in renegotiation phase
- cspScActiveSessions
- The number of active SSL sessions. This number indicates the number of valid session entries in the session cache.
- cspScMaxHandShakeConns
- This indicates the maximum number of connections present in handshake phase at any point of time
- cspScCurrDeviceQLen
- The current device queue length. Indicates the number of requests pending with the device.
- cspScMaxDeviceQLen
- The maximum device queue length recorded. Indicates the maximum number of requests queued to the device at any point of time.
- cspScSessionReuses
- The number of session reuses. Indicates the number of times the sessions got reused before the session timer expired.
- cspS3cFullHandShake
- The total number of full SSL 3.0 handshakes completed.
- cspS3cResumedHandShake
- The total number of SSL 3.0 resumed handshakes completed.
- cspS3cHandShakeFailed
- The total number of SSL 3.0 connections failed in handshake phase.
- cspS3cDataFailed
- The total number of SSL 3.0 sessions failed in data phase.
- cspS3cBadMacRcvd
- The total number of received SSL 3.0 records which have bad MAC (Message Authentication Code).
- cspS3cPadErrors
- The total number of received SSL 3.0 records which have pad errors.
- cspS3cRSArc4128md5
- The total number of SSL 3.0 connections which used cipher suite RSA_WITH_RC4_128_MD5.
- cspS3cRSArc4128sha
- The total number of SSL 3.0 connections which used cipher suite RSA_WITH_RC4_128_SHA.
- cspS3cRSAdescbcsha
- The total number of SSL 3.0 connections which used cipher suite RSA_WITH_DES_CBC_SHA.
- cspS3cRSA3desedecbcsha
- The total number of SSL 3.0 connections which used cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
- cspTlcFullHandShake
- The total number of full TLS 1.0 handshakes completed.
- cspTlcResumedHandShake
- The total number of resumed TLS 1.0 handshakes completed.
- cspTlcHandShakeFailed
- The total number of TLS 1.0 connections failed in handshake phase.
- cspTlcDataFailed
- The total number of TLS 1.0 connections failed in data phase.
- cspTlcBadMacRcvd
- The total number of received TLS 1.0 records which have bad MAC (Message Authentication Code.
- cspTlcPadErrors
- The total number of received TLS 1.0 records which have pad errors.
- cspTlcRSArc4128md5
- The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_RC4_128_MD5.
- cspTlcRSArc4128sha
- The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_RC4_128_SHA.
- cspTlcRSAdescbcsha
- The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_DES_CBC_SHA.
- cspTlcRSA3desedecbcsha
- The total number of TLS 1.0 connections which used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
- cspSccBlksEncrypted
- The total number of data blocks that got encrypted.
- cspSccBlksDecrypted
- The total number of data blocks that got decrypted.
- cspSccBytesEncrypted
- The total number of bytes that got encrypted.
- cspSccBytesDecrypted
- The total number of bytes that got decrypted.
- cspSccPublicKeyOpers
- The total number of RSA public key operations performed.
- cspSccPrivateKeyOpers
- The total number of RSA private key operations performed.
- cspSccCryptoFails
- The total number of failed cryptographic operations.
- cspSccDmaErrors
- The total number of cryptographic device DMA errors.
- cspSecSessAllocFailed
- The total number of times SSL session could not be allocated.
- cspSecSessLimitExceed
- The total number of times configured SSL session limit got exceeded. The new connections will be rejected if the session limit is exceeded.
- cspSecHShakeInitFailed
- The total number of times SSL connections failed even before the handshake phase got started. This typically indicates that there is some connectivity problem with the server.
- cspSecRenegFailed
- The total number of times SSL renegotiation failed.
- cspSecFatalAlertsRcvd
- The total number of fatal alerts received.
- cspSecFatalAlertsSent
- The total number of fatal alerts sent.
- cspSecNoCipherAlerts
- The total number of ALERT_HANDSHAKE_FAIL alerts sent due to unsupported cipher suites.
- cspSecVerMismatchAlerts
- The total number of ALERT_PROTOCOL_VERSION alerts sent due to unsupported version number.
- cspSecNoComprsnAlerts
- The total number of ALERT_HANDSHAKE_FAIL alerts sent due to unsupported compression scheme.
- cspSecHShakeHndleMemFail
- The total number of handshake handle memory allocation failure.
- cspSecStalePakDrop
- The total number of stale packets dropped. Indicates the number of packets received after the SSL connection is torn down.
- cspSecServiceIdDiscard
- The total number of connections rejected because of invalid service identifiers.
- cspSecHShakeLimitExceed
- The total number of times simultaneous handshake connection exceeded the capacity. The new connections will be rejected if the total number of simultaneous handshake connections exceeds the limit.
- cspSecDevConnCtxtFail
- The total number of times device context could not be allocated.
- cspSecMemAllocFailed
- The total number of times memory allocation failed.
- cspSecBuffAllocFailed
- The total number of times buffer allocation failed.
- cspSecAlertSendFailed
- The total number of failure to send alerts. This is typically because of the memory allocation failure.
- cspSecOverloadDropped
- The total number of connections rejected because of overload conditions. This indicates that the incoming rate is higher than what can be handled.
- cspSecConnAborted
- The total number of SSL connections aborted.
- cspPsCountersTable
- A list of proxy service global counter entries
- cspPsCounterEntry
- The proxy service global counter entry. Each entry displays the global SSL counters collected for a proxy service.
- cspPscClearTime
- The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
- cspPscConnAttempt
- The total number of SSL connections attempted.
- cspPscConnComplete
- The total number of SSL connections completed.
- cspPscFullHandShake
- The total number of full handshakes completed.
- cspPscResumedHandShake
- The total number of resumed handshakes completed.
- cspPscConnInHandShake
- The number of connections currently in handshake phase.
- cspPscConnInDataPhase
- The number of connections currently in data phase.
- cspPscRenegAttempt
- The total number of SSL renegotiations attempted.
- cspPscConnInReneg
- The number of connections currently in renegotiation phase.
- cspPscBlksEncrypted
- The total number of data blocks that got encrypted.
- cspPscBlksDecrypted
- The total number of data blocks that got decrypted.
- cspPscBytesEncrypted
- The total number of bytes that got encrypted.
- cspPscBytesDecrypted
- The total number of bytes that got decrypted.
- cspPscValidSessions
- The total number of current valid sessions in the session cache.
- cspPscSessLimitExceed
- The total number of times configured SSL session limit got exceeded. The new connections will be rejected if the session limit is exceeded.
- cspPscHandShakeFailed
- The total number of times SSL connections failed in handshake phase.
- cspPscDataFailed
- The total number of times SSL connections failed in data phase.
- cspPscFatalAlertsRcvd
- The total number of fatal alerts received.
- cspPscFatalAlertsSent
- The total number of fatal alerts sent.
- cspPscBadMacRcvd
- The total number of received SSL records which have bad MAC (Message Authentication Code).
- cspPscPadErrors
- The total number of received SSL records which have pad errors.
- cspPscNoCipherAlerts
- The total number of alerts sent due to unsupported cipher suites.
- cspPscNoComprsnAlerts
- The total number of alerts sent due to unsupported compression scheme.
- cspPscVerMismatchAlerts
- The total number of alerts sent due to unsupported SSL or TLS version.
- cspPsSsl3CountersTable
- A list of proxy service SSL 3.0 counter entries.
- cspPsSsl3CounterEntry
- The proxy service SSL 3.0 counter entry. This entry reports the counters collected about the SSL 3.0 protocol for each proxy service.
- cspPs3cClearTime
- The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have the value of zero.
- cspPs3cFullHandShake
- The total number of SSL 3.0 full handshakes completed.
- cspPs3cResumedHandShake
- The total number of SSL 3.0 resumed handshakes completed.
- cspPs3cHandShakeFailed
- The total number of SSL 3.0 connections failed in handshake phase.
- cspPs3cDataFailed
- The total number of SSL 3.0 connections failed in data phase.
- cspPs3cBadMacRcvd
- The total number of received SSL 3.0 records which have bad MAC (Message Authentication Code).
- cspPs3cPadErrors
- The total number of received SSL 3.0 records which have pad errors.
- cspPs3cRSArc4128md5
- The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_RC4_128_MD5.
- cspPs3cRSArc4128sha
- The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_RC4_128_SHA.
- cspPs3cRSAdescbcsha
- The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_DES_CBC_SHA.
- cspPs3cRSA3desedecbcsha
- The total number of SSL 3.0 connections that used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
- cspPsTls1CountersTable
- A list of proxy service TLS 1.0 counter entries.
- cspPsTls1CounterEntry
- The proxy service TLS 1.0 counter entry. This entry displays counters collected about the TLS 1.0 protocol for each proxy service.
- cspPt1cClearTime
- The last time when counters in this entry were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
- cspPt1cFullHandShake
- The total number of TLS 1.0 full handshakes completed.
- cspPt1cResumedHandShake
- The total number of TLS 1.0 resumed handshakes completed.
- cspPt1cHandShakeFailed
- The total number of TLS 1.0 connections failed in handshake phase.
- cspPt1cDataFailed
- The total number of TLS 1.0 connections failed in data phase.
- cspPt1cBadMacRcvd
- The total number of received TLS 1.0 records which have bad MAC (Message Authentication Code).
- cspPt1cPadErrors
- The total number of received TLS 1.0 records which have pad errors.
- cspPt1cRSArc4128md5
- The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_RC4_128_MD5.
- cspPt1cRSArc4128sha
- The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_RC4_128_SHA.
- cspPt1cRSAdescbcsha
- The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_DES_CBC_SHA.
- cspPt1cRSA3desedecbcsha
- The total number of TLS 1.0 connections that used the cipher suite RSA_WITH_3DES_EDE_CBC_SHA.
- cspCpuStatusTable
- A list of CPU status information entries.
- cspCpuStatusEntry
- The CPU status information entry. Each entry displays the operational status and usage information about one CPU on the proxy device. A proxy device can have one or more CPU's.
- cspCpuName
- The unique name of a CPU on the proxy device.
- cspCpuStatus
- The operational status of the CPU.
- cspCpuClearTime
- The last time when the CPU counters were cleared. If the proxy device does not allow these counters to be cleared, the timestamp should have a value of zero.
- cspCpuProcessUtil
- The percentage of CPU time utilized at process level.
- cspCpuInterruptUtil
- The percentage of CPU time utilized at interrupt level.
- cspCpuProcessUtilIn5Sec
- The percentage of CPU time utilized at process level within the past five seconds.
- cspCpuProcessUtilIn1Min
- The percentage of CPU time utilized at process level within the past minute.
- cspCpuProcessUtilIn5Min
- The percentage of CPU time utilized at process level within the past five minutes.
- cspCpuInterruptUtilIn5Sec
- The percentage of CPU time utilized at interrupt level within the past five seconds.
- cspCpuInterruptUtilIn1Min
- The percentage of CPU time utilized at interrupt level within the past minute.
- cspCpuInterruptUtilIn5Min
- The percentage of CPU time utilized at interrupt level within the past five minutes.
- cspGlobalConfigGroup
- A collection of global configuration objects.
- cspProxyServiceConfigGroup
- A collection of configuration objects for a proxy service.
- cspPolicyConfigGroup
- A collection of configuration objects for a policy.
- cspTcpGroup
- A collection of TCP protocol objects.
- cspSslGroup
- A collection of SSL handshake protocol statistics.
- cspSsl3Group
- A collection of SSL 3.0 protocol statistics.
- cspTls1Group
- A collection of TLS 1.0 protocol statistics.
- cspSslCryptoGroup
- A collection of cryptographic statistics.
- cspSslErrorGroup
- A collection of SSL protocol error counters.
- cspProxyServiceStatsGroup
- A collection of proxy service statistics.
- cspProxyServiceSsl3Group
- A collection of SSL 3.0 statistics for a proxy service.
- cspProxyServiceTls1Group
- A collection of TLS 1.0 statistics for a proxy service.
- cspCpuStatusGroup
- A collection of statuses and usage information about each CPU on the SSL proxy device.
Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring network devices right now.
