Details

Specify the use of a minimum of 128-bit AES algorithm for encryption when using SNMPv3.

NOTE: If performing an offline config audit this check may not show results.

Solution

For each SNMPv3 user created on your router add privacy options by issuing the following command.
hostname(config)#snmp-server user {user_name} {group_name} v3 encrypted auth sha {auth_password} priv aes 128 {priv_password} {acl_name_or_number}

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/508https://workbench.cisecurity.org/files/508

This control applies to the following type of system Cisco.

Source

• Tenable.com/audits