TMA-PFSENSE-5.1.3

Ensure that the add-on package NET-SNMP is installed and configured securely

中等級 2人工審核pfsense

說明

The add-on package NET-SNMP provides Simple Network Management Protocol (SNMP) functionality on pfSense. SNMP is used for network management and monitoring, allowing administrators to collect and view information about devices on the network. This rule ensures that the NET-SNMP package is installed and securely configured.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

System > Package Manager > Installed Packages: confirm NET-SNMP is installed. In Services > SNMP (NET-SNMP) confirm SNMPv3 users use SHA authentication and AES privacy, access is restricted to authorised manager hosts, and no default community strings (public/private) remain.

修補方式

修補方法: 操作指南或基礎設施修補檔

Install NET-SNMP from System > Package Manager > Available Packages. Configure SNMPv3 users with SHA authentication and AES privacy, restrict access to the management hosts, and remove or change any default community strings. Disable the built-in bsnmpd service if it is not needed.

屬性

作業系統: 不限
標籤: pfsensesnmp
參考資料: CIS pfSense Firewall Benchmark v1.1.0 - 5.1.3 Ensure that the add-on package NET-SNMP is installed and configured securely