TMA-PFSENSE-5.1.3
Ensure that the add-on package NET-SNMP is installed and configured securely
Description
The add-on package NET-SNMP provides Simple Network Management Protocol (SNMP) functionality on pfSense. SNMP is used for network management and monitoring, allowing administrators to collect and view information about devices on the network. This rule ensures that the NET-SNMP package is installed and securely configured.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
System > Package Manager > Installed Packages: confirm NET-SNMP is installed. In Services > SNMP (NET-SNMP) confirm SNMPv3 users use SHA authentication and AES privacy, access is restricted to authorised manager hosts, and no default community strings (public/private) remain.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Install NET-SNMP from System > Package Manager > Available Packages. Configure SNMPv3 users with SHA authentication and AES privacy, restrict access to the management hosts, and remove or change any default community strings. Disable the built-in bsnmpd service if it is not needed.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- pfsensesnmp
- Référence
- CIS pfSense Firewall Benchmark v1.1.0 - 5.1.3 Ensure that the add-on package NET-SNMP is installed and configured securely