SNMPv3 traps should be configured

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen

(?m)(?:^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?log-settings snmptrap (?:"[^"\n]*"|\S+) version v3 server (?:"[^"\n]*"|\S+) manager \S+(?s:.*?)^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?log-settings system match-list (?:"[^"\n]*"|\S+) send-snmptrap \S+|^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?log-settings system match-list (?:"[^"\n]*"|\S+) send-snmptrap \S+(?s:.*?)^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?log-settings snmptrap (?:"[^"\n]*"|\S+) version v3 server (?:"[^"\n]*"|\S+) manager \S+)

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

configure set shared log-settings snmptrap SNMPV3-PROFILE version v3 server NMS1 manager 10.0.0.60 user snmptrapuser engineid 0x80001f888056 set shared log-settings system match-list ALL-SYSTEM filter "All Logs" send-snmptrap SNMPV3-PROFILE commit # CIS guidance: Navigate to Device > Server Profiles > SNMP Trap Choose Add Assign a Name to the Profile, and specify version V3. Choose Add, and assign a server name in the Name field, add an IP address or FQDN in the SNMP Manager field. Edit the Password fields as appropriate for your server. Repeat if multiple Syslog destinations are required. Navigate to Device > Log Settings Under System, add an entry. Define a Name and a Filter setting. Under Forward Methods, add a SNMP Profile in the SNMP section. Ensure that at least one of the Log Settings Configuration entries has its Filter setting at All Logs Under Configuration, add an entry. Define a Name and a Filter setting. Under Forward Methods, add a SNMP Profile in the SNMP section. Ensure that at least one of the Log Settings Configuration entries has its Filter setting at All Logs Under User-ID, add an entry. Define a Name and a Filter setting. Under Forward Methods, add a SNMP Profile in the SNMP section. Ensure that at least one of the Log Settings Configuration entries has its Filter setting at All Logs Under HIP Match (Host Information Profile), add an entry. Define a Name and a Filter setting. Under Forward Methods, add a SNMP Profile in the SNMP section. Ensure that at least one of the Log Settings Configuration entries has its Filter setting at All Logs Under IP-Tag, add an entry. Define a Name and a Filter setting. Under Forward Methods, add a SNMP Profile in the SNMP section. Ensure that at least one of the Log Settings Configuration entries has its Filter setting at All Logs

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

tmaegis scan --target paloalto --level 2