Disable SNMPv3 Query Per User

높음레벨 2자동fortigate

설명

Disabling SNMP query for SNMPv3 Users that only need to receive SNMP traps FAILs if any SNMPv3 user has set queries enable. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^config system snmp user\n(?:[ \t]+[^\n]*\n)*?[ \t]+set queries enable[ \t]*$

조치 방법

조치 방식: 가이드 또는 인프라 패치

config system snmp user edit "<user>" set queries disable next end # CIS guidance: To disable Queries for a specific SNMPv3 User in CLI: {snmp_test is the example SNMPv3 username} config system snmp user edit snmp_test set queries disable next end To disable Queries for a specific SNMPv3 User in GUI: 1. System > SNMP 2. Under the SNMPv3 section select the specific user and double click or single click and select edit 3. Under the Queries section click the slider for "Enabled" so it is turned off

속성

운영 체제: 모두
태그: fortigateauthentication
참고 자료: CIS FortiGate 7.4.x Benchmark v1.0.1 - 2.3.3 Disable SNMPv3 Query Per User

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target fortigate --level 2