Retrieve version via SNMP

Hi James,

Im having problems to get license info via SNMP.

The OOID does not work (according this KB https://community.sophos.com/kb/en-us/125597 and MIB) 

Until this momment I did not found solution for this.

:/

Carlos

Hi see this: https://community.sophos.com/products/xg-firewall/f/sophos-xg-firewall-general-discussion/75477/has-anyone-got-snmp-monitoring-working#pi2151=1

To retrieve SFOS Version, I had to use its OID: .1.3.6.1.4.1.21067.2.1.1.3

License details still not works even with the MIB attached on this post  https://community.sophos.com/products/xg-firewall/f/sophos-xg-firewall-general-discussion/75477/has-anyone-got-snmp-monitoring-working#pi2151=1

:/

Starting playing around with this section of the mib file.

I could verify that the way the MIB file is, the services part is working:

example:

snmpget -m SFOS-MIB::sfos -On -v2c -c public 192.168.25.2 pop3Service
MIB search path: /root/.snmp/mibs:/usr/share/snmp/mibs:/usr/share/snmp/mibs/iana:/usr/share/snmp/mibs/ietf:/usr/share/mibs/site:/usr/share/snmp/mibs:/usr/share/mibs/iana:/usr/share/mibs/ietf:/usr/share/mibs/netsnmp
Cannot find module (sfos): At line 0 in (none)
.1.3.6.1.4.1.21067.2.1.2.10.1 = INTEGER: running(4)

same for:

imap4Service

smtpService

ftpService

etc...

The subscription part may have wrong confs in the MIB because they are returning unsubscribed for SubStatus and for expiryDate returning nothing:

snmpget -m SFOS-MIB::sfos -On -v2c -c public 192.168.25.2 idpSubStatus
MIB search path: /root/.snmp/mibs:/usr/share/snmp/mibs:/usr/share/snmp/mibs/iana:/usr/share/snmp/mibs/ietf:/usr/share/mibs/site:/usr/share/snmp/mibs:/usr/share/mibs/iana:/usr/share/mibs/ietf:/usr/share/mibs/netsnmp
Cannot find module (sfos): At line 0 in (none)
.1.3.6.1.4.1.21067.2.1.3.5.1 = INTEGER: unsubscribed(2)

snmpget -m SFOS-MIB::sfos -On -v2c -c public 192.168.25.2 idpExpiryDate
MIB search path: /root/.snmp/mibs:/usr/share/snmp/mibs:/usr/share/snmp/mibs/iana:/usr/share/snmp/mibs/ietf:/usr/share/mibs/site:/usr/share/snmp/mibs:/usr/share/mibs/iana:/usr/share/mibs/ietf:/usr/share/mibs/netsnmp
Cannot find module (sfos): At line 0 in (none)
.1.3.6.1.4.1.21067.2.1.3.5.2 = STRING:

Thanks. That works, so snmpwalk must be broken in Sophos's implementation of snmp?

snmpwalk from .1.3.6.1.4 includes the details i want, snmpwalk from .1.3.6.1 does not.

James

well, this I don´t know, but one problem that I have with snmpwalk is that i can´t choose the MIB I want to use properly , like I did with snmpget. The point is that this MIB was created based on a Cyberoam MIB, so, it probably has wrong keys inside it. Actualy this MIB is unoficial, and Sophos still didn´t release an oficial one (i guess).