Detections
Analytics

5.28 Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Enables Simple Network Management Protocol (SNMP) requests to be processed by this computer.

The recommended state for this setting is: Disabled or Not Installed.

Note: This service is not installed by default. It is supplied with Windows, but is installed by enabling an optional Windows feature (Simple Network Management Protocol (SNMP)).

Features that enable inbound network connections increase the attack surface. In a high security environment, management of secure workstations should be handled locally.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled or ensure the service is not installed.

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\SNMP Service

Impact:

The computer will be unable to process SNMP requests.

See Also

https://workbench.cisecurity.org/benchmarks/26296

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 4fbc026b4991bcc76ed2db8a6a547ad31c5ea0e9380ed88b1547802776078303