IP Firewall devices are updated as IP Router class. This may be the case with other SNMP devices as well. - Support and Troubleshooting

IP Firewall devices are updated as IP Router class. This may be the case with other SNMP devices as well. Description  Symptoms Firewall devices that are already discovered would be reclassified as Routers. This may be the case with other SNMP based devices.

Also, SNMP-Classify system OID information.

Cause sysObjectOID is primarily used for SNMP device classification. If sysObjectOID is not returned in the SNMP-Classify input payload or not been added to the SNMP OID list, then "SNMP-Classify" sensor would scan through some of the input payload OIDs to construct some capabilities ( ex : routing, printing, switching, etc to name a few ) which would then be used to classify a device further.

During this phase, sometimes sysObjectOID is not returned due to timeout and this may lead to the device classification based on the capabilities.

Missing sysObjectOID may look like this. All other OIDs are present, but the systemObjectOID is missing.

apcfwven1b 1043305934 IPSO apcfwven1b 6.2-GA083a02 releng 1 08.15.2013-191852 i386

Resolution Add "request_interval" snmp probe parameter with a greater value and see if this fetches the sysObjectOID. If this OID is returned and present in the SNMP OID list, the device should be classified accordingly.