Cyberoam

Overview

Cyberoam Firewall, the robust and advanced firewall solutions by Cyberoam (a Sophos Company), seamlessly integrate with Motadata AIOps to provide comprehensive monitoring and management capabilities. With this integration, organizations gain real-time visibility into the performance and security of their Cyberoam Firewalls. Monitor critical firewall metrics such as traffic patterns, connection status, and threat activity to ensure a secure and protected network environment.

Motadata AIOps empowers businesses to proactively detect potential security breaches, troubleshoot firewall issues, and optimize Cyberoam Firewall configurations for improved protection. Receive instant alerts for suspicious activities, intrusion attempts, or policy violations, allowing prompt action to mitigate potential threats.

Prerequisites

Refer Adding network devices for monitoring to understand the prerequisites necessary for monitoring a network device.

List of Supported KPIs

Metrics	Description	Type
ping.min.latency.ms	Minimum latency (in milliseconds) observed during ping	Count
ping.received.packets	Number of packets received during ping	Count
ping.lost.packets	Number of packets lost during ping	Count
ping.max.latency.ms	Maximum latency (in milliseconds) observed during ping	Count
object.target	Target object identifier	String
ping.sent.packets	Number of packets sent during ping	Count
ping.packet.lost.percent	Percentage of packet loss during ping	Percent
ping.latency.ms	Average latency (in milliseconds) observed during ping	Count
system.oid	System Object Identifier	String
started.time.sec	Uptime in Seconds for the monitor	Count
started.time	Uptime of the monitor	String
object.name	Name of the monitor	String
system.location	Location of the monitor	String
system.description	Description of the monitor	String
correlation.metrics	Correlation metrics between network connections	String
network.connection.tcp.connections	Number of TCP connections	Count
network.connection.udp.connections	Number of UDP connections	Count
network.connection.udp.error.segments	Number of UDP error segments	Count
network.connection.tcp.error.segments	Number of TCP error segments	Count
network.connection.tcp.retransmitted.segments	Number of TCP retransmitted segments	Count
destination.ip	Destination IP address	String
destination.port	Destination port number	Count
network.connection.protocol	Protocol used for network connection	Count
network.connection.state	State of the network connection	String
source.ip	Source IP address	String
source.port	Source port number	Count
interface.sent.discard.packets	Number of discarded packets sent on the interface	Count
interface.in.packets	Number of incoming packets on the interface	Count
interface.packets	Number of packets on the interface	Count
interface.error.packets	Number of error packets on the interface	Count
interface.sent.error.packets	Number of error packets sent on the interface	Count
interface.received.discard.packets	Number of discarded packets received on the interface	Count
interface.received.octets	Number of octets received on the interface	Count
interface.bit.type	Bit type of the interface	Count
status	Status of the interface	String
interface.out.packets	Number of outgoing packets on the interface	Count
interface.operational.status	Operational status of the interface	String
interface.admin.status	Admin status of the interface	Count
interface.sent.octets	Number of octets sent on the interface	Count
interface.last.change	Last change of the interface	String
interface.received.error.packets	Number of error packets received on the interface	Count
interface.discard.packets	Number of discarded packets on the interface	Count
started.time	Uptime of the interface	String
started.time.sec	Uptime in seconds of the interface	String
system.ha.mode	The high availability (HA) mode of the SNMP device.	String
system.live.users	The number of live users on the SNMP device.	Count
system.http.hits	The number of hits made to the HTTP service on the SNMP device.	Count
system.ftp.hits	The number of hits made to the FTP service on the SNMP device.	Count
system.cpu.percent	The CPU utilization percentage of the SNMP device.	Percentage
system.memory.used.percent	The percentage of used memory on the SNMP device.	Percentage
tunnel.life.time.sec	The lifetime duration of the tunnel in seconds.	Count
tunnel.active.time.sec	The time duration that the tunnel has been active in seconds.	Count
tunnel	The identifier or name of the tunnel.	String
tunnel.source.ip.address	The source IP address of the tunnel.	String
tunnel.out.traffic.bytes.rate	The rate of outgoing traffic in bytes per second through the tunnel.	Count
tunnel.in.traffic.bytes.rate	The rate of incoming traffic in bytes per second through the tunnel.	Count
tunnel.destination.ip.address	The destination IP address of the tunnel.	String
tunnel.name	The name or label assigned to the tunnel.	String
tunnel.status	The current status of the tunnel.	String
remote.vpn.active.connections	The number of active VPN connections from remote clients.	Count
remote.vpn.client.in.traffic.bytes.rate	The incoming traffic rate in bytes per second for VPN clients.	Count
remote.vpn.client.out.traffic.bytes.rate	The outgoing traffic rate in bytes per second for VPN clients.	Count
remote.vpn.client.protocol	The communication protocol used by the VPN client.	String
remote.vpn.client.encryption.algorithm	The encryption algorithm used by the VPN client.	String
remote.vpn.client	The identifier or name of the remote VPN client.	String
remote.vpn.client.duration.sec	The duration of the VPN client connection in seconds.	Count
remote.vpn.client.app.version	The version of the VPN client application.	String
remote.vpn.client.duration	The duration of the VPN client connection.	String
remote.vpn.client.status	The status of the VPN client connection.	String
remote.vpn.user.group	The user group associated with the remote VPN client.	String
remote.vpn.client.app	The application name of the remote VPN client.	String