136 Fortinet Inc.
FortiGate traps System configuration
FortiGate traps
The FortiGate agent can send traps to up to three SNMP trap receivers on your
network that are configured to receive traps from the FortiGate unit. For these SNMP
managers to receive traps, you must load and compile the Fortinet trap MIB onto the
SNMP manager. The FortiGate agent sends the traps listed in Table 2.
Customizing replacement messages
Replacement messages are added to content passing through the firewall to replace:
• Files or other content removed from email messages by the antivirus system
• Files or other content removed from HTTP downloads by the antivirus system or
web filtering
• Files removed from FTP downloads by the antivirus system
You can edit replacement messages to control the content of these messages when
they are received by a user.
You can also edit the content added to alert email messages to control the information
that appears in alert emails for virus incidents, NIDS events, critical system events,
and disk full events.
FORTINET.mib The Fortinet MIB is a proprietary MIB that includes detailed FortiGate
system configuration information. Add this MIB to your SNMP manager to
monitor all FortiGate configuration settings.
RFC1213.mib The RFC 1213 MIB is the standard MIB-II MIB that describes network
management protocols for TCP/IP networks.
Table 1: FortiGate MIBs
MIB file name Description
Table 2: FortiGate traps
Trap message Description
The <interface_name> Interface IP
is changed to <new_IP> (Fortigate
Serial No.: <FortiGate_serial_no>)
The IP address of an interface of a FortiGate unit has
changed. The trap message includes the name of the
interface for which the IP address changed, the new IP
address of the interface, and the serial number of the
FortiGate unit. This trap can be used to track interface
IP address changes for interfaces configured with
dynamic IP addresses set using DHCP or PPPoE.
System Down The FortiGate unit is shutting down.
Agent Down An administrator has disabled the SNMP agent. This
trap is also sent when the agent stops before a system
shutdown.
Cold Start The FortiGate unit starts or restarts. An administrator
enables the SNMP agent or changes FortiGate SNMP
settings. This trap is sent when the agent starts during
system startup.
Authentication failure An SNMP manager community string does not match
the FortiGate get community string