<!--startmeta
custom_edit_url: "https://github.com/netdata/netdata/edit/master/src/go/plugin/go.d/collector/snmp/npm-catalog/integrations/checkpoint.md"
meta_yaml: "https://github.com/netdata/netdata/edit/master/src/go/plugin/go.d/collector/snmp/npm-catalog/metadata.yaml"
sidebar_label: "Checkpoint"
learn_status: "Published"
learn_rel_path: "Network Performance Monitoring/Device Metrics/Integrations"
keywords: ['checkpoint', 'snmp', 'firewall', 'npm']
message: "DO NOT EDIT THIS FILE DIRECTLY, IT IS GENERATED BY THE NPM CATALOG metadata.yaml FILE"
endmeta-->

<!-- markdownlint-disable-file -->

# Checkpoint


<img src="https://netdata.cloud/img/SNMP.png" width="150"/>


Plugin: go.d.plugin
Module: snmp

<img src="https://img.shields.io/badge/maintained%20by-Netdata-%2300ab44" />

## Overview

Monitor Checkpoint (firewall) with Netdata over SNMP. Netdata recognizes the device automatically by its `sysObjectID` (recognized across 1 device identifiers) and collects the metrics this profile declares — on top of the generic SNMP baseline — with no manual OID configuration.

Netdata's SNMP collector matches the device to the **checkpoint.yaml** profile via `sysObjectID`/`sysDescr`, then polls the OIDs it declares.

This integration is supported on all platforms.

This integration supports multiple instances configured side-by-side.


### Default Behavior

#### Auto-Detection

Auto-detected as Checkpoint via sysObjectID/sysDescr.

#### Limits

The default configuration for this integration does not impose any limits.

#### Performance Impact

The default configuration for this integration is not expected to impose a significant performance impact on the system.

## Setup


You can configure the **snmp** collector in two ways:

| Method                | Best for                                                                                 | How to                                                                                                                                 |
|-----------------------|------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------|
| [**UI**](#via-ui)     | Fast setup without editing files                                                         | Go to **Nodes → Configure this node → Collectors → Jobs**, search for **snmp**, then click **+** to add a job. |
| [**File**](#via-file) | If you prefer configuring via file, or need to automate deployments (e.g., with Ansible) | Edit `go.d/snmp.conf` and add a job.                                                                        |

:::important

UI configuration requires paid Netdata Cloud plan.

:::


### Prerequisites

#### SNMP access

SNMP must be enabled on the device and reachable from the Netdata Agent acting as the site's SNMP hub.


### Configuration

#### Options

Configure the SNMP collector with the device hostname and SNMP credentials. See the SNMP collector reference for all options.


#### via UI

Configure the **snmp** collector from the Netdata web interface:

1. Go to **Nodes**.
2. Select the node **where you want the snmp data-collection job to run** and click the :gear: (**Configure this node**). That node will run the data collection.
3. The **Collectors → Jobs** view opens by default.
4. In the Search box, type _snmp_ (or scroll the list) to locate the **snmp** collector.
5. Click the **+** next to the **snmp** collector to add a new job.
6. Fill in the job fields, then click **Test** to verify the configuration and **Submit** to save.
    - **Test** runs the job with the provided settings and shows whether data can be collected.
    - If it fails, an error message appears with details (for example, connection refused, timeout, or command execution errors), so you can adjust and retest.


#### via File

The configuration file name for this integration is `go.d/snmp.conf`.

The file format is YAML. Generally, the structure is:

```yaml
update_every: 1
autodetection_retry: 0
jobs:
  - name: some_name1
  - name: some_name2
```
You can edit the configuration file using the [`edit-config`](https://github.com/netdata/netdata/blob/master/docs/netdata-agent/configuration/README.md#edit-configuration-files) script from the
Netdata [config directory](https://github.com/netdata/netdata/blob/master/docs/netdata-agent/configuration/README.md#locate-your-config-directory).

```bash
cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config go.d/snmp.conf
```

##### Examples
There are no configuration examples.



## Alerts

There are no alerts configured by default for this integration.



## Metrics

On top of the **generic SNMP baseline** (the *Generic SNMP Device* integration — interfaces, system, IP/TCP/UDP, host resources), this Checkpoint profile adds the metrics below. Each is collected **only where the device exposes the matching OID** — inclusion means the profile requests it; availability depends on the device model and software.

**176 metrics** in 16 groups; each row is a chart context usable in alerts.

| Group | Metrics |
|---|---|
| Hardware / RAID | 6 |
| Hardware / Sensor | 7 |
| Network / IP | 28 |
| Network / Interface | 31 |
| Network / TCP | 12 |
| Network / UDP | 6 |
| Network / VPN | 28 |
| Security / Cluster | 6 |
| Security / Firewall | 14 |
| Security / RemoteAccess | 2 |
| Security / VSX | 15 |
| System / Activity | 2 |
| System / CPU | 7 |
| System / Disk | 6 |
| System / Memory | 5 |
| System / Uptime | 1 |

### Hardware / RAID

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_numOfDisksOnRaid` | `{disk}` | per raid_volume_index | Number of physical disks in RAID volume |
| `snmp.device_prof_raidDiskSize` | `GBy` | per raid_disk_index | RAID physical disk size |
| `snmp.device_prof_raidDiskState` | `{status}` | per raid_disk_index | RAID physical disk state |
| `snmp.device_prof_raidDiskSyncState` | `%` | per raid_disk_index | RAID disk synchronization progress |
| `snmp.device_prof_raidVolumeSize` | `GBy` | per raid_volume_index | RAID volume size |
| `snmp.device_prof_raidVolumeState` | `{status}` | per raid_volume_index | RAID volume operational state |

### Hardware / Sensor

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_fanSpeedSensorStatus` | `{status}` | per sensor_index, sensor_name | Sensor is out of range true(1), false(0), reading error(2) |
| `snmp.device_prof_fanSpeedSensorValue` | `{revolution}/min` | per sensor_index, sensor_name | Sensor value |
| `snmp.device_prof_powerSupplyStatus` | `{status}` | per psu_index | Power supply operational status |
| `snmp.device_prof_tempertureSensorStatus` | `{status}` | per sensor_index, sensor_name | Sensor is out of range true(1), false(0), reading error(2) |
| `snmp.device_prof_tempertureSensorValue` | `Cel` | per sensor_index, sensor_name | Sensor value |
| `snmp.device_prof_voltageSensorStatus` | `{status}` | per sensor_index, sensor_name | Voltage sensor out-of-range status |
| `snmp.device_prof_voltageSensorValue` | `V` | per sensor_index, sensor_name | Voltage sensor reading |

### Network / IP

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_ipSystemStatsHCInBcastPkts` | `{packet}/s` | per ipversion | The number of IP broadcast datagrams received |
| `snmp.device_prof_ipSystemStatsHCInForwDatagrams` | `{forward}/s` | per ipversion | Input datagrams for which this entity was not their final IP destination and for which this entity attempted to find a route to fo… |
| `snmp.device_prof_ipSystemStatsHCInMcastOctets` | `bit/s` | per ipversion | The total number of octets received in IP multicast datagrams |
| `snmp.device_prof_ipSystemStatsHCInMcastPkts` | `{packet}/s` | per ipversion | The number of IP multicast datagrams received |
| `snmp.device_prof_ipSystemStatsHCInOctets` | `bit/s` | per ipversion | Octets received in input IP datagrams |
| `snmp.device_prof_ipSystemStatsHCInReceives` | `{packet}/s` | per ipversion | Input IP datagrams received |
| `snmp.device_prof_ipSystemStatsHCOutBcastPkts` | `{packet}/s` | per ipversion | The number of IP broadcast datagrams transmitted |
| `snmp.device_prof_ipSystemStatsHCOutForwDatagrams` | `{packet}/s` | per ipversion | The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path… |
| `snmp.device_prof_ipSystemStatsHCOutMcastOctets` | `bit/s` | per ipversion | The total number of octets transmitted in IP multicast datagrams |
| `snmp.device_prof_ipSystemStatsHCOutMcastPkts` | `{packet}/s` | per ipversion | The number of IP multicast datagrams transmitted |
| `snmp.device_prof_ipSystemStatsHCOutOctets` | `bit/s` | per ipversion | The total number of octets in IP datagrams delivered to the lower layers for transmission |
| `snmp.device_prof_ipSystemStatsHCOutRequests` | `{packet}/s` | per ipversion | The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission |
| `snmp.device_prof_ipSystemStatsHCOutTransmits` | `{packet}/s` | per ipversion | The total number of IP datagrams that this entity supplied to the lower layers for transmission |
| `snmp.device_prof_ipSystemStatsInAddrErrors` | `{error}/s` | per ipversion | Input IP datagrams discarded due to invalid IP address in header |
| `snmp.device_prof_ipSystemStatsInDiscards` | `{error}/s` | per ipversion | The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded |
| `snmp.device_prof_ipSystemStatsInHdrErrors` | `{error}/s` | per ipversion | Discarded input IP datagrams due to errors in their IP headers |
| `snmp.device_prof_ipSystemStatsInNoRoutes` | `{errors}/s` | per ipversion | Input IP datagrams discarded because no route could be found to transmit them to their destination |
| `snmp.device_prof_ipSystemStatsInTruncatedPkts` | `{error}/s` | per ipversion | Input IP datagrams discarded due to datagram frame not carrying enough data |
| `snmp.device_prof_ipSystemStatsInUnknownProtos` | `{error}/s` | per ipversion | Locally-addressed IP datagrams received successfully but discarded due to an unknown or unsupported protocol |
| `snmp.device_prof_ipSystemStatsOutDiscards` | `{error}/s` | per ipversion | The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer… |
| `snmp.device_prof_ipSystemStatsOutFragCreates` | `{fragment}/s` | per ipversion | The number of output datagram fragments that have been generated as a result of IP fragmentation |
| `snmp.device_prof_ipSystemStatsOutFragFails` | `{error}/s` | per ipversion | The number of IP datagrams that have been discarded because they needed to be fragmented but could not be |
| `snmp.device_prof_ipSystemStatsOutFragOKs` | `{packet}/s` | per ipversion | The number of IP datagrams that have been successfully fragmented |
| `snmp.device_prof_ipSystemStatsOutFragReqds` | `{packet}/s` | per ipversion | The number of IP datagrams that would require fragmentation in order to be transmitted |
| `snmp.device_prof_ipSystemStatsOutNoRoutes` | `{error}/s` | per ipversion | The number of locally generated IP datagrams discarded because no route could be found to transmit them to their destination |
| `snmp.device_prof_ipSystemStatsReasmFails` | `{error}/s` | per ipversion | The number of failures detected by the IP re-assembly algorithm |
| `snmp.device_prof_ipSystemStatsReasmOKs` | `{packet}/s` | per ipversion | The number of IP datagrams successfully reassembled |
| `snmp.device_prof_ipSystemStatsReasmReqds` | `{fragment}/s` | per ipversion | The number of IP fragments received that needed to be reassembled at this interface |

### Network / Interface

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_ifAdminStatus` | `{status}` | per interface, interface | Current administrative state of the interface |
| `snmp.device_prof_ifHighSpeed` | `bit/s` | per interface, interface | Estimate of the interface's current bandwidth |
| `snmp.device_prof_ifNumber` | `{interface}` | device | Number of network interfaces regardless of their current state present on this system |
| `snmp.device_prof_ifOperStatus` | `{status}` | per interface, interface | Current operational state of the interface |
| `snmp.device_prof_ipIfStatsHCInBcastPkts` | `{packet}/s` | per interface_index, ipversion | The number of IP broadcast datagrams received |
| `snmp.device_prof_ipIfStatsHCInDelivers` | `{packet}/s` | per interface_index, ipversion | The total number of datagrams successfully delivered to IP user-protocols including ICMP |
| `snmp.device_prof_ipIfStatsHCInForwDatagrams` | `{forward}/s` | per interface_index, ipversion | The number of input datagrams for which this entity was not their final IP destination and for which this entity attempted to find… |
| `snmp.device_prof_ipIfStatsHCInMcastOctets` | `bit/s` | per interface_index, ipversion | The total number of octets received in IP multicast datagrams |
| `snmp.device_prof_ipIfStatsHCInMcastPkts` | `{packet}/s` | per interface_index, ipversion | The number of IP multicast datagrams received |
| `snmp.device_prof_ipIfStatsHCInOctets` | `bit/s` | per interface_index, ipversion | The total number of octets received in input IP datagrams, including those received in error |
| `snmp.device_prof_ipIfStatsHCOutBcastPkts` | `{packet}/s` | per interface_index, ipversion | The number of IP broadcast datagrams transmitted |
| `snmp.device_prof_ipIfStatsHCOutForwDatagrams` | `{packet}/s` | per interface_index, ipversion | The number of datagrams for which this entity was not their final IP destination and for which it was successful in finding a path… |
| `snmp.device_prof_ipIfStatsHCOutMcastOctets` | `bit/s` | per interface_index, ipversion | The total number of octets transmitted in IP multicast datagrams |
| `snmp.device_prof_ipIfStatsHCOutMcastPkts` | `{packet}/s` | per interface_index, ipversion | The number of IP multicast datagrams transmitted |
| `snmp.device_prof_ipIfStatsHCOutOctets` | `bit/s` | per interface_index, ipversion | The total number of octets in IP datagrams delivered to the lower layers for transmission |
| `snmp.device_prof_ipIfStatsHCOutRequests` | `{packet}/s` | per interface_index, ipversion | The total number of IP datagrams that local IP user-protocols including ICMP supplied to IP in requests for transmission |
| `snmp.device_prof_ipIfStatsHCOutTransmits` | `{packet}/s` | per interface_index, ipversion | The total number of IP datagrams that this entity supplied to the lower layers for transmission |
| `snmp.device_prof_ipIfStatsInAddrErrors` | `{error}/s` | per interface_index, ipversion | The number of input IP datagrams discarded because the IP address in their IP header's destination field was not a valid address t… |
| `snmp.device_prof_ipIfStatsInDiscards` | `{error}/s` | per interface_index, ipversion | The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but were discarded |
| `snmp.device_prof_ipIfStatsInHdrErrors` | `{error}/s` | per interface_index, ipversion | The number of input IP datagrams discarded due to errors in their IP headers |
| `snmp.device_prof_ipIfStatsInNoRoutes` | `{error}/s` | per interface_index, ipversion | The number of input IP datagrams discarded because no route could be found to transmit them to their destination |
| `snmp.device_prof_ipIfStatsInTruncatedPkts` | `{error}/s` | per interface_index, ipversion | The number of input IP datagrams discarded because the datagram frame didn't carry enough data |
| `snmp.device_prof_ipIfStatsInUnknownProtos` | `{error}/s` | per interface_index, ipversion | The number of locally-addressed IP datagrams received successfully but discarded because of an unknown or unsupported protocol |
| `snmp.device_prof_ipIfStatsOutDiscards` | `{error}/s` | per interface_index, ipversion | The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but wer… |
| `snmp.device_prof_ipIfStatsOutFragCreates` | `{fragment}/s` | per interface_index, ipversion | The number of output datagram fragments that have been generated as a result of IP fragmentation |
| `snmp.device_prof_ipIfStatsOutFragFails` | `{packet}/s` | per interface_index, ipversion | The number of IP datagrams that have been discarded because they needed to be fragmented but could not be |
| `snmp.device_prof_ipIfStatsOutFragOKs` | `{packet}/s` | per interface_index, ipversion | The number of IP datagrams that have been successfully fragmented |
| `snmp.device_prof_ipIfStatsOutFragReqds` | `{packet}/s` | per interface_index, ipversion | The number of IP datagrams that would require fragmentation in order to be transmitted |
| `snmp.device_prof_ipIfStatsReasmFails` | `{error}/s` | per interface_index, ipversion | The number of failures detected by the IP re-assembly algorithm |
| `snmp.device_prof_ipIfStatsReasmOKs` | `{packet}/s` | per interface_index, ipversion | The number of IP datagrams successfully reassembled |
| `snmp.device_prof_ipIfStatsReasmReqds` | `{fragment}/s` | per interface_index, ipversion | The number of IP fragments received that needed to be reassembled at this interface |

### Network / TCP

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_tcpActiveOpens` | `{transition}/s` | device | TCP connections transitioning from CLOSED to SYN-SENT |
| `snmp.device_prof_tcpAttemptFails` | `{failure}/s` | device | Failed TCP connection attempts |
| `snmp.device_prof_tcpCurrEstab` | `{connection}` | device | Current TCP connections in ESTABLISHED or CLOSE-WAIT state |
| `snmp.device_prof_tcpEstabResets` | `{reset}/s` | device | TCP connections reset from ESTABLISHED/CLOSE-WAIT |
| `snmp.device_prof_tcpHCInSegs` | `{packet}/s` | device | TCP segments received |
| `snmp.device_prof_tcpHCOutSegs` | `{packet}/s` | device | TCP segments sent |
| `snmp.device_prof_tcpInErrs` | `{error}/s` | device | TCP segments received with errors |
| `snmp.device_prof_tcpInSegs` | `{packet}/s` | device | TCP segments received |
| `snmp.device_prof_tcpOutRsts` | `{reset}/s` | device | TCP segments sent with RST flag |
| `snmp.device_prof_tcpOutSegs` | `{packet}/s` | device | TCP segments sent |
| `snmp.device_prof_tcpPassiveOpens` | `{transition}/s` | device | TCP connections transitioning from LISTEN to SYN-RCVD |
| `snmp.device_prof_tcpRetransSegs` | `{retransmit}/s` | device | TCP segments retransmitted |

### Network / UDP

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_udpHCInDatagrams` | `{packet}/s` | device | UDP datagrams received |
| `snmp.device_prof_udpHCOutDatagrams` | `{packet}/s` | device | UDP datagrams sent |
| `snmp.device_prof_udpInDatagrams` | `{packet}/s` | device | UDP datagrams received |
| `snmp.device_prof_udpInErrors` | `{error}/s` | device | UDP datagrams received but couldn't be delivered (not due to missing app) |
| `snmp.device_prof_udpNoPorts` | `{error}/s` | device | UDP datagrams received with no app on the destination port |
| `snmp.device_prof_udpOutDatagrams` | `{packet}/s` | device | UDP datagrams sent |

### Network / VPN

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_cpvCurrEspSAsIn` | `{sa}` | device | Number of current inbound ESP Security Associations |
| `snmp.device_prof_cpvCurrEspSAsOut` | `{sa}` | device | Number of current outbound ESP Security Associations |
| `snmp.device_prof_cpvIKECurrInitSAs` | `{sa}` | device | Current IKE Security Associations initiated by this gateway |
| `snmp.device_prof_cpvIKECurrRespSAs` | `{sa}` | device | Current IKE Security Associations responded to by this gateway |
| `snmp.device_prof_cpvIKECurrSAs` | `{sa}` | device | Number of current IKE Security Associations |
| `snmp.device_prof_cpvIKEMaxConncurSAs` | `{sa}` | device | Peak concurrent IKE Security Associations |
| `snmp.device_prof_cpvIKENoResp` | `{failure}/s` | device | IKE failures per second due to no response from peer |
| `snmp.device_prof_cpvIKETotalFailuresInit` | `{failure}/s` | device | IKE negotiation failures as initiator per second |
| `snmp.device_prof_cpvIKETotalFailuresResp` | `{failure}/s` | device | IKE negotiation failures as responder per second |
| `snmp.device_prof_cpvIKETotalSAs` | `{sa}/s` | device | IKE Security Associations created per second |
| `snmp.device_prof_cpvIKETotalSAsAttempts` | `{attempt}/s` | device | IKE SA negotiation attempts per second |
| `snmp.device_prof_cpvIpsecEspDecBytes` | `By/s` | device | ESP decrypted bytes per second |
| `snmp.device_prof_cpvIpsecEspDecPkts` | `{packet}/s` | device | ESP decrypted packets per second |
| `snmp.device_prof_cpvIpsecEspEncBytes` | `By/s` | device | ESP encrypted bytes per second |
| `snmp.device_prof_cpvIpsecEspEncPkts` | `{packet}/s` | device | ESP encrypted packets per second |
| `snmp.device_prof_cpvIpsecUdpEspDecPkts` | `{packet}/s` | device | NAT-T UDP-encapsulated ESP decrypted packets per second |
| `snmp.device_prof_cpvIpsecUdpEspEncPkts` | `{packet}/s` | device | NAT-T UDP-encapsulated ESP encrypted packets per second |
| `snmp.device_prof_cpvSaAuthErr` | `{error}/s` | device | SA authentication errors per second |
| `snmp.device_prof_cpvSaDecrErr` | `{error}/s` | device | SA decryption errors per second |
| `snmp.device_prof_cpvSaOtherErrIn` | `{error}/s` | device | IPSec SA other inbound errors per second |
| `snmp.device_prof_cpvSaOtherErrOut` | `{error}/s` | device | IPSec SA other outbound errors per second |
| `snmp.device_prof_cpvSaPolicyErr` | `{error}/s` | device | IPSec SA policy errors per second |
| `snmp.device_prof_cpvSaReplayErr` | `{error}/s` | device | SA replay errors per second |
| `snmp.device_prof_cpvSaUnknownSpiErr` | `{error}/s` | device | IPSec SA unknown SPI errors per second |
| `snmp.device_prof_permanentTunnelProbState` | `{status}` | per tunnel_index, tunnel_peer_name | DPD probe state of the permanent VPN tunnel |
| `snmp.device_prof_permanentTunnelState` | `{status}` | per tunnel_index, tunnel_peer_name | Current state of the permanent VPN tunnel |
| `snmp.device_prof_tunnelProbState` | `{status}` | per tunnel_index, tunnel_peer_name | DPD probe state of the VPN tunnel |
| `snmp.device_prof_tunnelState` | `{status}` | per tunnel_index, tunnel_peer_name | Current state of the VPN tunnel |

### Security / Cluster

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_haInstalled` | `{status}` | device | Whether HA/ClusterXL is installed on this gateway |
| `snmp.device_prof_haProblemPriority` | `{priority}` | per problem_index | HA problem priority level |
| `snmp.device_prof_haProblemVerified` | `{status}` | per problem_index | Whether the HA problem has been verified |
| `snmp.device_prof_haStarted` | `{status}` | device | Whether HA/ClusterXL has been started |
| `snmp.device_prof_haStatCode` | `{code}` | device | HA/ClusterXL numeric status code (0 = healthy) |
| `snmp.device_prof_haState` | `{status}` | device | HA/ClusterXL member state |

### Security / Firewall

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_fwAccepted` | `{packet}/s` | device | Number of accepted packets |
| `snmp.device_prof_fwDropped` | `{packet}/s` | device | Number of dropped packets |
| `snmp.device_prof_fwFullyUtilizedDrops` | `{packet}/s` | device | Packets dropped per second due to fully utilized firewall instance |
| `snmp.device_prof_fwHmemBytesPeak` | `By` | device | Firewall heap memory peak bytes used |
| `snmp.device_prof_fwHmemBytesUsed` | `By` | device | Firewall heap memory bytes in use |
| `snmp.device_prof_fwHmemFailedAlloc` | `{failure}/s` | device | Firewall heap memory allocation failures per second |
| `snmp.device_prof_fwKmemAvailablePhysicalMem` | `By` | device | Firewall kernel physical memory available for allocation |
| `snmp.device_prof_fwKmemBytesPeak` | `By` | device | Firewall kernel memory peak bytes used |
| `snmp.device_prof_fwKmemBytesUsed` | `By` | device | Firewall kernel memory bytes in use |
| `snmp.device_prof_fwKmemFailedAlloc` | `{failure}/s` | device | Firewall kernel memory allocation failures per second |
| `snmp.device_prof_fwKmemSystemPhysicalMem` | `By` | device | Firewall kernel total system physical memory |
| `snmp.device_prof_fwLogged` | `{packet}/s` | device | Logged packets per second |
| `snmp.device_prof_fwRejected` | `{packet}/s` | device | Number of rejected packets |
| `snmp.device_prof_fwSICTrustState` | `{status}` | device | SIC trust state between gateway and management server |

### Security / RemoteAccess

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_dtpsConnectedUsers` | `{user}` | device | Currently connected remote access VPN users |
| `snmp.device_prof_dtpsLicensedUsers` | `{user}` | device | Licensed remote access VPN users |

### Security / VSX

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_vsxCountersAcceptedTotal` | `{packet}/s` | per vs_id | Virtual system accepted packets per second |
| `snmp.device_prof_vsxCountersBytesAcceptedTotal` | `By/s` | per vs_id | Virtual system accepted bytes per second |
| `snmp.device_prof_vsxCountersBytesDroppedTotal` | `By/s` | per vs_id | Virtual system dropped bytes per second |
| `snmp.device_prof_vsxCountersBytesRejectedTotal` | `By/s` | per vs_id | Virtual system rejected bytes per second |
| `snmp.device_prof_vsxCountersConnNum` | `{connection}` | per vs_id | Virtual system active connections |
| `snmp.device_prof_vsxCountersConnPeakNum` | `{connection}` | per vs_id | Virtual system peak connections |
| `snmp.device_prof_vsxCountersConnTableLimit` | `{connection}` | per vs_id | Virtual system connection table limit |
| `snmp.device_prof_vsxCountersDroppedTotal` | `{packet}/s` | per vs_id | Virtual system dropped packets per second |
| `snmp.device_prof_vsxCountersLoggedTotal` | `{packet}/s` | per vs_id | Virtual system logged packets per second |
| `snmp.device_prof_vsxCountersRejectedTotal` | `{packet}/s` | per vs_id | Virtual system rejected packets per second |
| `snmp.device_prof_vsxStatusCPUUsage1min` | `%` | per vs_id | Virtual system CPU usage (1 minute average) |
| `snmp.device_prof_vsxStatusVSWeight` | `{weight}` | per vs_id, vs_name | Virtual system resource control weight |
| `snmp.device_prof_vsxVsConfigured` | `{vs}` | device | Number of virtual systems configured |
| `snmp.device_prof_vsxVsInstalled` | `{vs}` | device | Number of virtual systems installed |
| `snmp.device_prof_vsxVsSupported` | `{vs}` | device | Maximum number of virtual systems supported |

### System / Activity

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_fwNumConn` | `{connection}` | device | Number of connections |
| `snmp.device_prof_fwPeakNumConn` | `{connection}` | device | Peak number of connections |

### System / CPU

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_cpu_usage` | `%` | per cpu_core | The current CPU utilization |
| `snmp.device_prof_multiProcIdleTime` | `%` | per cpu_core | Processor idle time |
| `snmp.device_prof_multiProcSystemTime` | `%` | per cpu_core | Processor system time |
| `snmp.device_prof_multiProcUserTime` | `%` | per cpu_core | Processor user time |
| `snmp.device_prof_procInterrupts` | `{interrupt}/s` | device | Processor interrupts per second |
| `snmp.device_prof_procNum` | `{processor}` | device | Number of processors |
| `snmp.device_prof_procQueue` | `{process}` | device | Processor run queue length |

### System / Disk

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_multiDiskFreeAvailableBytes` | `By` | per disk_index, disk_name | Disk free available bytes |
| `snmp.device_prof_multiDiskFreeAvailablePercent` | `%` | per disk_index, disk_name | Disk free available percent |
| `snmp.device_prof_multiDiskFreeTotalBytes` | `By` | per disk_index, disk_name | Disk free total bytes |
| `snmp.device_prof_multiDiskFreeTotalPercent` | `%` | per disk_index, disk_name | Disk free total percent |
| `snmp.device_prof_multiDiskSize` | `GBy` | per disk_index, disk_name | Disk size |
| `snmp.device_prof_multiDiskUsed` | `GBy` | per disk_index, disk_name | Disk used |

### System / Memory

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_memActiveReal64` | `By` | device | Active real memory |
| `snmp.device_prof_memActiveVirtual64` | `By` | device | Active virtual memory |
| `snmp.device_prof_memFreeReal64` | `By` | device | Free real memory |
| `snmp.device_prof_memTotalReal64` | `By` | device | Total real memory |
| `snmp.device_prof_memTotalVirtual64` | `By` | device | Total virtual memory |

### System / Uptime

| Metric (chart context) | Unit | Scope | Description |
|---|---|---|---|
| `snmp.device_prof_systemUptime` | `s` | device | Time since the system was last rebooted or powered on. |
