TMA-PFSENSE-5.1.3
Ensure that the add-on package NET-SNMP is installed and configured securely
Beschreibung
The add-on package NET-SNMP provides Simple Network Management Protocol (SNMP) functionality on pfSense. SNMP is used for network management and monitoring, allowing administrators to collect and view information about devices on the network. This rule ensures that the NET-SNMP package is installed and securely configured.
So wird geprüft
Prüfmethode: Manuelle Prüfung
Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.
System > Package Manager > Installed Packages: confirm NET-SNMP is installed. In Services > SNMP (NET-SNMP) confirm SNMPv3 users use SHA authentication and AES privacy, access is restricted to authorised manager hosts, and no default community strings (public/private) remain.
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Install NET-SNMP from System > Package Manager > Available Packages. Configure SNMPv3 users with SHA authentication and AES privacy, restrict access to the management hosts, and remove or change any default community strings. Disable the built-in bsnmpd service if it is not needed.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- pfsensesnmp
- Referenz
- CIS pfSense Firewall Benchmark v1.1.0 - 5.1.3 Ensure that the add-on package NET-SNMP is installed and configured securely