Details
SNMP notifications can be sent as traps to authorized management systems.
Rationale:
SNMP has the ability to submit traps .
Impact:
Organizations using SNMP should restrict trap types only to explicitly named traps to reduce unintended traffic. Enabling SNMP traps without specifying trap type will enable all SNMP trap types.
Solution
Enable SNMP traps.
hostname(config)#snmp-server enable traps snmp authentication linkup linkdown coldstart
Default Value:
SNMP notifications are disabled.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Cisco.