Fortinet FortiSwitch
TMA-FORTISWITCH-1.5.1.2
Allow only trusted hosts in SNMPv3
Açıklama
Ensuring that only certain hosts are able to conduct SNMP GET or receive SNMP Trap. FAILs if any SNMPv3 user lists 0.0.0.0 in notify-hosts. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.
Nasıl denetlenir
Denetim yöntemi: Yapılandırma deseni
- Desen
(?m)^config system snmp user\n(?:[ \t]+[^\n]*\n)*?[ \t]+set notify-hosts [^\n]*\b0\.0\.0\.0\b[^\n]*[ \t]*$
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
config system snmp user edit "<user>" set notify-hosts <nms-ip> next end # CIS guidance: To remove 0.0.0.0 from trusted hosts in CLI: config system snmp user edit "snmp_test" unset notify-hosts end From GUI: 1. System > Config > SNMP > Users. 2. On the Users section click "Edit" on "snmp_test". 3. Remove 0.0.0.0 from "Notify Hosts" section.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- fortiswitchsnmp
- Referans
- CIS FortiSwitch Benchmark v1.0.0 - 1.5.1.2 Allow only trusted hosts in SNMPv3
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target fortiswitch --level 2