TMA-PFSENSE-5.1.3
Ensure that the add-on package NET-SNMP is installed and configured securely
Description
The add-on package NET-SNMP provides Simple Network Management Protocol (SNMP) functionality on pfSense. SNMP is used for network management and monitoring, allowing administrators to collect and view information about devices on the network. This rule ensures that the NET-SNMP package is installed and securely configured.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
System > Package Manager > Installed Packages: confirm NET-SNMP is installed. In Services > SNMP (NET-SNMP) confirm SNMPv3 users use SHA authentication and AES privacy, access is restricted to authorised manager hosts, and no default community strings (public/private) remain.
How it is fixed
Fix method: Guidance or infrastructure patch
Install NET-SNMP from System > Package Manager > Available Packages. Configure SNMPv3 users with SHA authentication and AES privacy, restrict access to the management hosts, and remove or change any default community strings. Disable the built-in bsnmpd service if it is not needed.
Properties
- Operating systems
- Any
- Tags
- pfsensesnmp
- Reference
- CIS pfSense Firewall Benchmark v1.1.0 - 5.1.3 Ensure that the add-on package NET-SNMP is installed and configured securely