SNMP Query for Byspass Status (AIP5)

Question

I'd like to monitor the state of Bypass mode for the ASA-SSC-AIP-5 and would like to know if I can check this with SNMP and if so, which OID.
I started messing with SNMP and the SSC5 a while back and started a thread about snmpwalk causing it to crash.  After that, I never really picked the project back up.
I've been known to miss the obvious every now and then, but I was dissapointed to see that there wasn't an (obvious) way for the device to alert you when it automatically goes into bypass mode.  This should be a feature request.

Answer 1

IPS provides SNMP traps for different interface conditions like link going down or up, traffic bypass started, etc. Below is one such example
Received SNMPv2c Trap: Community: "public"
From: 10.89.149.204 mib_2.1.3.0 = 38429472
snmpModules.1.1.4.1.0 = ciscoMgmt.138.2.0.1
ciscoMgmt.138.1.3.3.1.3 = 3                      <====    index can be mapped to index obtained from snmpwalk
ciscoMgmt.138.1.3.3.1.4 = 5                      <====    Traffic bypass started
ciscoMgmt.138.1.3.3.1.5 = 4
ciscoMgmt.138.1.3.3.1.6 = 38429472
All you need to do is enable sending traps from the sensor.
qssp-8085(config)# service notification
qssp-8085(config-not)# enable-set-get true
qssp-8085(config-not)# enable-notification true
qssp-8085(config-not)# read-only-community public
qssp-8085(config-not)# read-write-community private
qssp-8085(config-not)# trap-destinations x.x.x.x           <===== trap destination
qssp-8085(config-not-tra)# exit
qssp-8085(config-not)# exit
You can configure separate community name under trap-destination. If not provided then the read-write-community will be used to send with the trap.
Hope this helps
Madhu