Fortinet FortiGate Series Administration Manual page 247

System Config
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Table 18: FortiGate IPS traps
Trap message Description
(fgIpsTrapSrcIp) IP Address of the IPS signature trigger.
(fgIpsTrapSigMsg) Message associated with IPS event.
Table 19: FortiGate antivirus traps
Trap message
Virus detected
(fgTrapAvVirus)
Oversize file/email detected
(fgTrapAvOversize)
Filename block detected
(fgTrapAvPattern)
Fragmented file detected
(fgTrapAvFragmented)
(fgTrapAvEnterConserve)
(fgTrapAvBypass)
(fgTrapAvOversizePass)
(fgTrapAvOversizeBlock)
(fgAvTrapVirName)
Table 20: FortiGate HA traps
Trap message
HA switch
(fgTrapHaSwitch)
HA Heartbeat Failure
(fgTrapHaHBFail)
(fgTrapHaMemberDown)
(fgTrapHaMemberUp)
(fgTrapHaStateChange)
(fgHaTrapMemberSerial)
Table 21: FortiGate MIB FortiManager related traps
Trap message
(fgFmTrapDeployComplete)
(fgFmTrapDeployInProgress)
(fgFmTrapConfChange)
(fgFmTrapIfChange)
Description
The antivirus engine detected a virus in an infected file from an HTTP
or FTP download or from an email message.
The antivirus scanner detected an oversized file.
The antivirus scanner blocked a file that matched a known virus
pattern.
The antivirus scanner detected a fragmented file or attachment.
The AV engine entered conservation mode due to low memory
conditions.
The AV scanner has been bypassed due to conservation mode.
An oversized file has been detected, but has been passed due to
configuration.
An oversized file has been detected, and has been blocked.
The virus name that triggered the event.
Description
The specified cluster member has transitioned from a slave role to a
master role.
The heartbeat failure count has exceeded the configured threshold.
An HA member becomes unavailable to the cluster.
An HA member becomes available to the cluster.
The trap sent when the HA cluster member changes its state.
.
Serial number of an HA cluster member. Used to identify the origin of a
trap when a cluster is configured.
Description
Indicates when deployment of a new configuration has been
completed.
Used for verification by FortiManager.
Indicates that a configuration change was not immediate and that
the change is currently in progress.
Used for verification by FortiManager.
The FortiGate unit configuration has been changed by something
other than the managing FortiManager device.
No message. Sent to monitoring FortiManager when an interface
changes IP address.
SNMP
247