Forcepoint (SNMP) extension
- Latest Dynatrace
- Extension
- Published Oct 27, 2025
Gain insights into the performance of your Forcepoint Appliances.
Get started
Overview
This extension leverages the SNMP protocol to provide a complete solution to monitor Forcepoint Appliances. The complete configuration is provided out of the box.
This extension is intended for users who want to monitor the health state and performance of their Forcepoint Appliances, and provide a unified analysis for Ops, DevOps, and IT Admins.
Simply activate the extension in your environment using the in-product Hub, provide device configuration, and you’re all set up.
Use cases
- Monitor Forcepoint Appliances by polling data for Network Devices and Interfaces
- Enable alerting on detected anomalies
- Use with the Infrastructure and Operations App for an overview of all monitored Network Devices in the environment.
- Monitor the health and performance of your Forcepoint Appliances
- Use an included alert configuration to be alerted if a monitored interface goes into a 'down' state
- Set up alerts to be notified of traffic anomalies
Compatibility information
- This extension is to be used with Forcepoint Appliances only.
- SNMPv2c and SNMPv3 supported only.
Details
This extension is built on top of the Extension 2.0 Framework.
The extension package contains:
- SNMP Data Source configuration
- New and Classic Dashboard Overviews
- Unified Analysis Screens
- Topology definition and entity extraction rules
- Generic Network Topology Support
Licensing and cost
License consumption is based on the number of metric data points ingested. Below is a breakdown of metrics by feature set (metrics collected once per minute):
- default (8)
- 5 per Forcepoint device
- 3 per Forcepoint interface
- CPU (7)
- 7 per Forcepoint device
- Disks (3)
- 3 per Forcepoint partition
- Extra Packet Statistics (12)
- 12 per Forcepoint Interface
- Memory (5)
- 5 per Forcepoint Device
- Network Interfaces (7)
- 7 per Forcepoint Interface
- Node (7)
- 7 per Forcepoint Interface
- Swap (3)
- 3 per Forcepoint Device
Approximate yearly datapoints = <metrics> * 60 minutes * 24 hours * 365 days data points per year
Classic licensing
In the Dynatrace classic licensing model, metric ingestion will consume Davis Data Units (DDUs) at the rate of .001 DDUs per metric data point.
Multiply the above formula for annual data points by .001 to estimate annual DDU usage.
Troubleshooting
- To troubleshoot this extension, use the guides in the Dynatrace Community, and Dynatrace Documentation.
Feature sets
When activating your extension using monitoring configuration, you can limit monitoring to one of the feature sets. To work properly the extension has to collect at least one metric after the activation.
In highly segmented networks, feature sets can reflect the segments of your environment. Then, when you create a monitoring configuration, you can select a feature set and a corresponding ActiveGate group that can connect to this particular segment.
All metrics that aren't categorized into any feature set are considered to be the default and are always reported.
A metric inherits the feature set of a subgroup, which in turn inherits the feature set of a group. Also, the feature set defined on the metric level overrides the feature set defined on the subgroup level, which in turn overrides the feature set defined on the group level.
Disks
| Metric name | Metric key | Description |
|---|---|---|
| Partition size | snmp.forcepoint.partition.fw_size | Total size of the partition |
| Partition used space | snmp.forcepoint.partition.fw_used | Amount of used space of the partition (in kilobytes) |
| Partition free space | snmp.forcepoint.partition.fw_avail | Information about amount of free space on partition (in kilobytes) |
CPU
| Metric name | Metric key | Description |
|---|---|---|
| — | snmp.forcepoint.fw_cpu_total | — |
| — | snmp.forcepoint.fw_cpu_user | — |
| — | snmp.forcepoint.fw_cpu_system | — |
| — | snmp.forcepoint.fw_cpu_nice | — |
| — | snmp.forcepoint.fw_cpu_idle | — |
| — | snmp.forcepoint.fw_cpu_io_wait | — |
| — | snmp.forcepoint.fw_cpu_hw_irq | — |
Extra Packet Statistics
| Metric name | Metric key | Description |
|---|---|---|
| — | snmp.forcepoint.fw_if_accepted_pkts | — |
| — | snmp.forcepoint.fw_if_dropped_pkts | — |
| — | snmp.forcepoint.fw_if_logged_pkts | — |
| — | snmp.forcepoint.fw_if_accounted_pkts | — |
| — | snmp.forcepoint.fw_if_rejected_pkts | — |
| — | snmp.forcepoint.fw_if_accepted_bytes | — |
| — | snmp.forcepoint.fw_if_dropped_bytes | — |
| — | snmp.forcepoint.fw_if_logged_bytes | — |
| — | snmp.forcepoint.fw_if_accounted_bytes | — |
| — | snmp.forcepoint.fw_if_rejected_bytes | — |
| — | snmp.forcepoint.fw_if_forwarded_pkts | — |
| — | snmp.forcepoint.fw_if_forwarded_bytes | — |
Network Interfaces
| Metric name | Metric key | Description |
|---|---|---|
| Interface speed | snmp.forcepoint.interface.if_high_speed | An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of n' then the speed of the interface is somewhere in the range of n-500,000' to `n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero. |
| Octets received | snmp.forcepoint.interface.if_in_octets.count | The total number of octets received on the interface including framing characters |
| Octets transmitted | snmp.forcepoint.interface.if_out_octets.count | The total number of octets transmitted out of the interface including framing characters |
| Inbound errors | snmp.forcepoint.interface.if_in_errors.count | Number of inbound packets/transmission units with errors |
| — | snmp.forcepoint.interface.if_in_discards.count | — |
| Outbound errors | snmp.forcepoint.interface.if_out_errors.count | Number of outbound packets/transmission units with errors |
| Outbound discards | snmp.forcepoint.interface.if_out_discards.count | Number of outbound packets discarded |
Memory
| Metric name | Metric key | Description |
|---|---|---|
| Total physical memory | snmp.forcepoint.fw_mem_bytes_total | Amount of available bytes of physical memory |
| Used memory | snmp.forcepoint.fw_mem_bytes_used | Amount of memory being in use |
| Unused memory | snmp.forcepoint.fw_mem_bytes_unused | Amount of unused bytes of physical memory |
| Memory buffers | snmp.forcepoint.fw_mem_bytes_buffers | Amount of memory used as buffers |
| Memory cache | snmp.forcepoint.fw_mem_bytes_cached | Amount of memory used as cache |
Node
| Metric name | Metric key | Description |
|---|---|---|
| CPU Load | snmp.forcepoint.node_cpu_load | The CPU load percentage on the node |
| Current connections | snmp.forcepoint.fw_conn_number | Number of current connections |
| Accepted packets | snmp.forcepoint.fw_accepted | Number of accepted packets |
| Dropped packets | snmp.forcepoint.fw_dropped | Number of dropped packets |
| Logged packets | snmp.forcepoint.fw_logged | Number of logged packets |
| Accounted packets | snmp.forcepoint.fw_accounted | Number of accounted packets |
| Rejected packets | snmp.forcepoint.fw_rejected | Number of rejected packets |
Swap
| Metric name | Metric key | Description |
|---|---|---|
| Total swap space | snmp.forcepoint.fw_swap_bytes_total | Amount of available bytes of swap |
| Used swap | snmp.forcepoint.fw_swap_bytes_used | Amount of swap being in use |
| Unused swap | snmp.forcepoint.fw_swap_bytes_unused | Amount of unused bytes of swap |
default
| Metric name | Metric key | Description |
|---|---|---|
| — | com.dynatrace.extension.network_device.sysuptime | — |
| — | com.dynatrace.extension.network_device.cpu_usage | — |
| — | com.dynatrace.extension.network_device.memory_used | — |
| — | com.dynatrace.extension.network_device.memory_free | — |
| — | com.dynatrace.extension.network_device.if.bytes_in.count | — |
| — | com.dynatrace.extension.network_device.if.bytes_out.count | — |
| — | com.dynatrace.extension.network_device.if.status | — |
| Forcepoint status | snmp.forcepoint.node_oper_state | The operative (clustering) state of the node : unknown(0), online(1), goingOnline(2), lockedOnline(3), goingLockedOnline(4), offline(5), goingOffline(6), lockedOffline(7), goingLockedOffline(8), standby(9), goingStandby(10) |
