> Source: [sk139152](https://support.checkpoint.com/results/sk/sk139152)

# sk139152 - SNMP query ".1.3.6.1.4.1.2620.1.38" gives values different from those in the "pdp monitor" command's output

| Property | Value |
|----------|-------|
| Solution ID | sk139152 |
| Date Created | 2018-10-29 |
| Last Modified | 2018-11-01 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- SNMP queries of connected Identity Awareness users provide values different from those in the "PDP monitor" commands's output.   

For example, SNMP outputs might show:   

```

snmpwalk -On -v2c -c public x.x.x.x .1.3.6.1.4.1.2620.1.38
.1.3.6.1.4.1.2620.1.38.1.0 = STRING: "Identity Awareness"
.1.3.6.1.4.1.2620.1.38.2.0 = Gauge32: 2950
.1.3.6.1.4.1.2620.1.38.3.0 = Gauge32: 0
.1.3.6.1.4.1.2620.1.38.4.0 = Gauge32: 2897
.1.3.6.1.4.1.2620.1.38.5.0 = Gauge32: 0
.1.3.6.1.4.1.2620.1.38.6.0 = Gauge32: 53
```

However, the "PDP monitor" command shows 13 users for Captive Portal \& 2897 Kerberos Users:

```

[Expert@Firewall_Name:0]# pdp monitor summary all flags -rmc | grep Pass | wc -l
13

[Expert@Firewall_Name:0]# pdp monitor summary all flags -rmc | grep Kerbe | wc -l
742
```

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content