The number of rejected initial handshakes with peers
not supporting SSL secure renegotiation.
Parsed from file F5-BIGIP-SYSTEM-MIB.txt
Company: f5
Module: F5-BIGIP-SYSTEM-MIB
Child arc 0 is used to translate between SNMPv1 and SNMPv2 notification parameters as explained in IETF RFC 2576, section 3.
sysClientsslStatInsecureHandshakeRejects OBJECT-TYPE SYNTAX Counter64 MAX-ACCESS read-only STATUS current DESCRIPTION "The number of rejected initial handshakes with peers not supporting SSL secure renegotiation." ::= { sysGlobalClientSslStat 57 }
| OID | Name | Sub children | Sub Nodes Total | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.3375.2.1.1.2.9.57.0 | sysClientsslStatInsecureHandshakeRejects | 0 | 0 | None |
| OID | Name | Sub children | Sub Nodes Total | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.3375.2.1.1.2.9.1 | sysClientsslStatResetStats | 1 | 1 | The action to reset resetable statistics data in sysGlobalClientSslStat. Setting this value to 1 will reset statistics data. Not… |
| 1.3.6.1.4.1.3375.2.1.1.2.9.2 | sysClientsslStatCurConns | 1 | 1 | The current number of concurrent connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.3 | sysClientsslStatMaxConns | 1 | 1 | The maximum number of concurrent connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.4 | sysClientsslStatCurNativeConns | 1 | 1 | The current number of concurrent native connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.5 | sysClientsslStatMaxNativeConns | 1 | 1 | The maximum number of concurrent native connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.6 | sysClientsslStatTotNativeConns | 1 | 1 | The total number of concurrent native connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.7 | sysClientsslStatCurCompatConns | 1 | 1 | The current number of concurrent compat connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.8 | sysClientsslStatMaxCompatConns | 1 | 1 | The maximum number of concurrent compat connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.9 | sysClientsslStatTotCompatConns | 1 | 1 | The total number of concurrent compat connections with established SSL sessions being maintained by the filter. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.10 | sysClientsslStatEncryptedBytesIn | 1 | 1 | The total encrypted bytes received. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.11 | sysClientsslStatEncryptedBytesOut | 1 | 1 | The total encrypted bytes sent. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.12 | sysClientsslStatDecryptedBytesIn | 1 | 1 | The total decrypted bytes received. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.13 | sysClientsslStatDecryptedBytesOut | 1 | 1 | The total decrypted bytes sent. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.14 | sysClientsslStatRecordsIn | 1 | 1 | The total records received. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.15 | sysClientsslStatRecordsOut | 1 | 1 | The total records sent. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.16 | sysClientsslStatFullyHwAcceleratedConns | 1 | 1 | Fully hardware-accelerated implies usage of the Cavium Nitrox or similar hardware accelerator such that all significant cryptogra… |
| 1.3.6.1.4.1.3375.2.1.1.2.9.17 | sysClientsslStatPartiallyHwAcceleratedConns | 1 | 1 | Partially hardware-accelerated indicates that at least the RSA decryptions are offloaded. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.18 | sysClientsslStatNonHwAcceleratedConns | 1 | 1 | Non-accelerated connections are those for which no steady-state hardware acceleration is available (either because no hardware ac… |
| 1.3.6.1.4.1.3375.2.1.1.2.9.19 | sysClientsslStatPrematureDisconnects | 1 | 1 | The number of connections disconnected before SSL session establishment: the total number of connections that were prematurely cl… |
| 1.3.6.1.4.1.3375.2.1.1.2.9.20 | sysClientsslStatMidstreamRenegotiations | 1 | 1 | The number of mid-stream SSL re-negotiations, not including initial SSL session establishment. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.21 | sysClientsslStatSessCacheCurEntries | 1 | 1 | The number of the current entries in this cache. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.22 | sysClientsslStatSessCacheHits | 1 | 1 | The total number of the cache hits. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.23 | sysClientsslStatSessCacheLookups | 1 | 1 | The total number of the cache lookups. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.24 | sysClientsslStatSessCacheOverflows | 1 | 1 | The total number of the cache overflows. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.25 | sysClientsslStatSessCacheInvalidations | 1 | 1 | The total number of the session invalidations. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.26 | sysClientsslStatPeercertValid | 1 | 1 | The total number of the valid certificates. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.27 | sysClientsslStatPeercertInvalid | 1 | 1 | The total number of the invalid certificates. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.28 | sysClientsslStatPeercertNone | 1 | 1 | The total number of connections without certificates. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.29 | sysClientsslStatHandshakeFailures | 1 | 1 | The total number of handshake failures. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.30 | sysClientsslStatBadRecords | 1 | 1 | The total number of the bad records. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.31 | sysClientsslStatFatalAlerts | 1 | 1 | The total number of the fatal alerts. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.32 | sysClientsslStatSslv2 | 1 | 1 | The SSL protocol version 2. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.33 | sysClientsslStatSslv3 | 1 | 1 | The SSL protocol version 3. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.34 | sysClientsslStatTlsv1 | 1 | 1 | The SSL TLS protocol version 1. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.35 | sysClientsslStatAdhKeyxchg | 1 | 1 | The anonymous Diffie-Hellman. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.36 | sysClientsslStatDhDssKeyxchg | 1 | 1 | Deprecated! DSS certificate is obsolete in BIGIP. The diffie-Hellman w/ DSS certificate. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.37 | sysClientsslStatDhRsaKeyxchg | 1 | 1 | The diffie-Hellman w/ RSA certificate. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.38 | sysClientsslStatDssKeyxchg | 1 | 1 | Deprecated! DSS certificate is obsolete in BIGIP. The DSS certificate. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.39 | sysClientsslStatEdhDssKeyxchg | 1 | 1 | Deprecated! DSS certificate is obsolete in BIGIP. The ephemeral Diffie-Hellman w/ DSS cert. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.40 | sysClientsslStatRsaKeyxchg | 1 | 1 | The RSA certificate. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.41 | sysClientsslStatNullBulk | 1 | 1 | No encryption. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.42 | sysClientsslStatAesBulk | 1 | 1 | Advances Encryption Standard (CBC). |
| 1.3.6.1.4.1.3375.2.1.1.2.9.43 | sysClientsslStatDesBulk | 1 | 1 | Digital Encryption Standard (CBC). |
| 1.3.6.1.4.1.3375.2.1.1.2.9.44 | sysClientsslStatIdeaBulk | 1 | 1 | IDEA (old SSLv2 cipher). |
| 1.3.6.1.4.1.3375.2.1.1.2.9.45 | sysClientsslStatRc2Bulk | 1 | 1 | Rivest Cipher 2 (CBC). |
| 1.3.6.1.4.1.3375.2.1.1.2.9.46 | sysClientsslStatRc4Bulk | 1 | 1 | Rivest Cipher 4 (CBC). |
| 1.3.6.1.4.1.3375.2.1.1.2.9.47 | sysClientsslStatNullDigest | 1 | 1 | No message authentication. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.48 | sysClientsslStatMd5Digest | 1 | 1 | Message Digest 5. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.49 | sysClientsslStatShaDigest | 1 | 1 | Secure Hash Algorithm. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.50 | sysClientsslStatNotssl | 1 | 1 | The total number of the bad client greetings. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.51 | sysClientsslStatEdhRsaKeyxchg | 1 | 1 | Ephemeral Diffie-Hellman w/ RSA cert. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.52 | sysClientsslStatTotConns5s | 1 | 1 | The average total SSL connections from client-side to the system in last five seconds. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.53 | sysClientsslStatTotConns1m | 1 | 1 | The average total SSL connections from client-side to the system in last one minute. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.54 | sysClientsslStatTotConns5m | 1 | 1 | The average total SSL connections from client-side to the system in last five minutes. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.55 | sysClientsslStatSecureHandshakes | 1 | 1 | The number of handshakes, including mid-stream re-negotiations, performed with peers supporting SSL secure renegotiation. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.56 | sysClientsslStatInsecureHandshakeAccepts | 1 | 1 | The number of handshakes, including mid-stream re-negotiations, performed with peers not supporting SSL secure renegotiation. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.58 | sysClientsslStatInsecureRenegotiationRejects | 1 | 1 | The number of rejected renegotiation attempts by peers not supporting SSL secure renegotiation. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.59 | sysClientsslStatSniRejects | 1 | 1 | The number of rejected handshake attempts by peers not supporting SSL SNI extension or having mismatched server names. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.60 | sysClientsslStatTlsv11 | 1 | 1 | The SSL TLS protocol version 1.1. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.61 | sysClientsslStatTlsv12 | 1 | 1 | The SSL TLS protocol version 1.2. |
| 1.3.6.1.4.1.3375.2.1.1.2.9.62 | sysClientsslStatDtlsv1 | 1 | 1 | The SSL DTLS protocol version 1.0. |