1. Home
  2. Security Hardening
  3. Tenable Cisco Firepower Best Practices
  4. Ensure ‘snmp-server group’ is set to ‘v3 priv’

Ensure ‘snmp-server group’ is set to ‘v3 priv’

Details

Sets the SNMP v3 group with authentication and privacy

Rationale:

SNMP Version 3 provides security enhancements that are not available in SNMP Version 1 or SNMP Version 2c. SNMP Versions 1 and 2c transmit data between the SNMP server and SNMP agent in clear text. SNMP Version 3 adds authentication and privacy options to secure protocol operations.

For configuration purposes, the authentication and privacy options are grouped together into security models. Security models apply to users and groups, and are divided into the following three types:

*NoAuthPriv–No Authentication and No Privacy, which means that no security is applied to messages.

*AuthNoPriv–Authentication but No Privacy, which means that messages are authenticated.

*AuthPriv–Authentication and Privacy, which means that messages are authenticated and encrypted.

It is recommended that packets should be authenticated and encrypted

Solution

Firepower Management Center:

Devices > Platform settings > SNMP

Supportive Information

The following resource is also helpful.

This control applies to the following type of system Cisco.

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles