Policy Violation Notification - 策略违规通知 —— 行为或配置违反已下发的安全策略时上报

Go back Parent node: Security Incident Notification - 安全事件通知子树 —— 认证失败、入侵、恶意代码与策略违规类事件，1-9 事件类、10-19 处置与关闭类、20-99 预留扩展 (1.3.6.1.4.1.59719.0.4)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.0.4.4`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) security-incident-notification(4) policy-violation-notification(4) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/SecurityIncidentNotification/PolicyViolationNotification`
WEID notation:	`weid:P-1A2V-0-4-4-7`
DER encoding:	`06:0B:2B:06:01:04:01:83:D2:47:00:04:04`

Description

English:
Policy violation notification. Reported when a behaviour or a configuration violates a deployed security policy.
Status: registered but unused. No device or platform has emitted this notification. Before first use, define how the violated policy is identified and whether the policy identifier or the policy name is carried. The unused state shall be re-verified at each revision of this file.
Recommendation: Carry the policy identifier, the violating object and the enforcement action taken, and align the policy naming with the compliance objects under 1.3.6.1.4.1.59719.6.4.
See also: 1.3.6.1.4.1.59719.0.4, 1.3.6.1.4.1.59719.6.4, 1.3.6.1.4.1.59719.6.2.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
策略违规通知。行为或配置违反已下发的安全策略时上报。
状态：已注册但未使用。尚无设备或平台上报过本通知。首次使用前应定义被违反策略的标识方式以及载荷中携带的是策略标识还是策略名称。本文件每次修订时须重新核验该未使用状态。
建议：应携带策略标识、违规对象与已执行的强制动作，并使策略命名与 1.3.6.1.4.1.59719.6.4 下的合规对象保持一致。
关联节点：1.3.6.1.4.1.59719.0.4、1.3.6.1.4.1.59719.6.4、1.3.6.1.4.1.59719.6.2。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC5B085404 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-ef89a97fcfde	OIDplus Information Object Custom UUID (RFC 9562)
guid:2b06b176-5f17-3c20-bcfc-cffd14d36f35	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:6da5b0fe-2b71-5c02-82ef-14c8ce051d7f	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:02-2D-5B-08-54-04	OIDplus Information Object MAC address, Unicast (AAI)
mac:03-2D-5B-08-54-04	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-0-4-4-7	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=1527272452	OIDplus Information Object X.500 DN