snmp, sophos and get some probelm in log

[m_pahlevanzadeh]

I have 6.4 and import sophos template, and I input community name and my ip then I copy mibs file in /usr/share/snmp/mibs and Now I get the following ereror zabbix_server.log :

MIB search path: $HOME/.snmp/mibs:/usr/share/snmp/mibs:/usr/share/snmp/mibs/iana:/usr/share/snmp/mibs/ietf
Cannot find module (SNMPv2-SMI): At line 22 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Cannot find module (INET-ADDRESS-MIB): At line 26 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Cannot find module (SNMPv2-TC): At line 34 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Cannot find module (IPV6-TC): At line 36 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Did not find 'enterprises' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'InetAddress' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'InetAddressType' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'InetPortNumber' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'DisplayString' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'PhysAddress' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'Ipv6Address' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Unlinked OID in SFOS-FIREWALL-MIB: sophosMIB ::= { enterprises 2604 }
Undefined identifier: enterprises near line 38 of /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
MIB search path: $HOME/.snmp/mibs:/usr/share/snmp/mibs:/usr/share/snmp/mibs/iana:/usr/share/snmp/mibs/ietf
Cannot find module (SNMPv2-SMI): At line 22 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Cannot find module (INET-ADDRESS-MIB): At line 26 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Cannot find module (SNMPv2-TC): At line 34 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Cannot find module (IPV6-TC): At line 36 in /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt
Did not find 'enterprises' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'InetAddress' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'InetAddressType' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'InetPortNumber' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'DisplayString' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'PhysAddress' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Did not find 'Ipv6Address' in module #-1 (/usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt)
Unlinked OID in SFOS-FIREWALL-MIB: sophosMIB ::= { enterprises 2604 }
Undefined identifier: enterprises near line 38 of /usr/share/snmp/mibs/SOPHOS-XG-MIB20.txt




What's my problem?

[markfree]

I suspect you are using the outdated community template for Sophos "version 18" available from the Zabbix Integrations page.
It seems to rely on the "SFOS-FIREWALL-MIB" MIB and possibly some dependencies.
You need to have this specific MIB installed with the specific names that the template uses in its items.

Personally, I don't like this approach because it requires a MIB installation. I prefer to just use OIDs.
You could try translating those names to OIDs and ditch the MIB altogether.

Also, there's another template for Sophos which does not use MIB names. Maybe that could help you.

[m_pahlevanzadeh]

Do you know a template according to OID?

[markfree]

As I said, there's another template for Sophos which does not use MIB names.
What I meant was that the Zabbix Integrations page has another template you could try.
Have you looked at it?

[m_pahlevanzadeh]

According to you said , i install another sophos template and after some second I get the following log and host sphos will be became unavailable:
329063:20240226:092325.407 item "sophos:tomcatService" became not supported: snmp_parse_oid(): cannot parse OID "SFOS-FIREWALL-MIB::sfosTomcatService.0".
329063:20240226:092325.407 item "sophos:webcatVersion" became not supported: snmp_parse_oid(): cannot parse OID "SFOS-FIREWALL-MIB::sfosWebcatVersion.0".
329063:20240226:092325.407 item "sophos:webProtectionLicExpiryDate" became not supported: snmp_parse_oid(): cannot parse OID "SFOS-FIREWALL-MIB::sfosWebProtectionLicExpiryDate.0".
329063:20240226:092325.408 item "sophos:webProtectionLicRegStatus" became not supported: snmp_parse_oid(): cannot parse OID "SFOS-FIREWALL-MIB::sfosWebProtectionLicRegStatus.0".
329063:20240226:092325.408 item "sophos:webServerProtectionLicExpiryDate" became not supported: snmp_parse_oid(): cannot parse OID "SFOS-FIREWALL-MIB::sfosWebServerProtectionLicExpiryDate.0".
329063:20240226:092325.408 item "sophos:webServerProtectionLicRegStatus" became not supported: snmp_parse_oid(): cannot parse OID "SFOS-FIREWALL-MIB::sfosWebServerProtectionLicRegStatus.0".
329081:20240226:092332.792 SNMP agent item "system.name" on host "sophos" failed: first network error, wait for 15 seconds
329085:20240226:092351.417 SNMP agent item "system.descr[sysDescr.0]" on host "sophos" failed: another network error, wait for 15 seconds
329085:20240226:092414.442 SNMP agent item "system.cpu.util" on host "sophos" failed: another network error, wait for 15 seconds
329085:20240226:092441.473 temporarily disabling SNMP agent checks on host "sophos": interface unavailable
329084:20240226:093333.902 SNMP agent item "avExpiryDate" on host "sophos" failed: first network error, wait for 15 seconds