Fortigate Traps - Fortinet FortiGate FortiGate-800 Administration Manual

System config

FortiGate traps

FortiGate-800 Administration Guide
The FortiGate agent can send traps to SNMP managers that you have added to
SNMP communities. For SNMP managers to receive traps, you must load and
compile the Fortinet trap MIB (file name fortinet.trap.2.80.mib) onto the SNMP
manager.
All traps include the trap message as well as the FortiGate unit serial number.
Table 7: Generic FortiGate traps
Trap message
ColdStart
WarmStart
LinkUp
LinkDown
Table 8: FortiGate system traps
Trap message
CPU usage high
(SysCpuHigh)
Disk low
<FortiGate_serial_no>
<interface_name>
HA state
HA switch
Memory low
(SysMemLow)
The <interface_name>
Interface IP is changed
to <new_IP>
(Serial No.:
<FortiGate_serial_no>)
(IntfIpChange)
Table 9: FortiGate VPN traps
Trap message
VPN tunnel is up
(VpnTunnelUp)
VPN tunnel down
(VpnTunnelDown)
01-28006-0008-20041105
Description
Standard traps as described in RFC 1215.
Description
CPU usage exceeds 90%.
On a FortiGate unit with a hard drive, hard drive usage exceeds
90%.
The configuration of an interface of a FortiGate unit changes. The
trap message includes the name of the interface and the serial
number of the FortiGate unit.
HA state changes. The trap message includes the previous state, the
new state and a flag indicating whether the unit is the master.
The primary unit in an HA cluster fails and is replaced with a new
primary unit.
Memory usage exceeds 90%.
The IP address of an interface of a FortiGate unit changes. The trap
message includes the name of the interface, the new IP address of
the interface, and the serial number of the FortiGate unit. This trap
can be used to track interface IP address changes for interfaces
configured with dynamic IP addresses set using DHCP or PPPoE.
Description
An IPSec VPN tunnel starts up and begins processing network
traffic.
An IPSec VPN tunnel shuts down.
SNMP
103