Detections
Analytics

1.5.1 Ensure 'V3' is selected for SNMP polling

Information

For SNMP polling, only SNMPv3 should be used.
Rationale:
SNMPv3 utilizes AES-128 encryption, message integrity, user authorization, and device authentication security features. SNMPv2c does not provide these security features. If an SNMPv2c community string is intercepted or otherwise obtained, an attacker could gain read access to the firewall. Note that SNMP write access is not possible.

Solution

Navigate to Device > Setup > Operations > Miscellaneous > SNMP Setup
Select V3.
Default Value:
Not configured

See Also

https://workbench.cisecurity.org/files/2104

Item Details

Category: IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|IA-2(1), 800-53|SC-8, 800-53|SI-4, CSCv6|3.4, CSCv6|9.1, CSCv6|14.2, CSCv7|4.5, CSCv7|9.2, CSCv7|14.4

Plugin: Palo_Alto

Control ID: a5cdede2467dcb69a3b6fee4b4ee376444363aa74766359e82617281f6f42df5