With IPHost Network Monitor you can run simple snmp requests against a Cisco device in your network.
docsDevFilterIpControl
DOCSIS Device Filter Ip Control
1.3.6.1.2.1.69.1.6.4.1.3
If set to discard(1), all packets matching this filter will be discarded, and scanning of the remainder of the filter list will be aborted. If set to accept(2), all packets matching this filter will be accepted for further processing (e.g., bridging). If docsDevFilterIpContinue is set to true, see if there are other matches; otherwise, done. If set to policy (3), execute the policy entries matched by docsDevFilterIpPolicyId in docsDevFilterPolicyTable. If docsDevFilterIpContinue is set to true, continue scanning the table for other matches; otherwise, done.
Back to DOCS-CABLE-DEVICE-MIB MIB page.
IPHost Network monitor allows you to monitor docsDevFilterIpControl on Cisco device via the SNMP protocol. Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring Cisco firewalls right now.