Disable SNMPv3 Query Per User

VisokaNivo 2Automatskafortigate

Opis

Disabling SNMP query for SNMPv3 Users that only need to receive SNMP traps FAILs if any SNMPv3 user has set queries enable. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^config system snmp user\n(?:[ \t]+[^\n]*\n)*?[ \t]+set queries enable[ \t]*$

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

config system snmp user edit "<user>" set queries disable next end # CIS guidance: To disable Queries for a specific SNMPv3 User in CLI: {snmp_test is the example SNMPv3 username} config system snmp user edit snmp_test set queries disable next end To disable Queries for a specific SNMPv3 User in GUI: 1. System > SNMP 2. Under the SNMPv3 section select the specific user and double click or single click and select edit 3. Under the Queries section click the slider for "Enabled" so it is turned off

Svojstva

Operativni sistemi: Bilo koji
Oznake: fortigateauthentication
Referenca: CIS FortiGate 7.4.x Benchmark v1.0.1 - 2.3.3 Disable SNMPv3 Query Per User

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target fortigate --level 2