Detections
Analytics

1.39 ESXI-80-000212

Information

The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.

GROUP ID: V-258767
RULE ID: SV-258767r959010

If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.

Solution

To disable SNMP from an ESXi shell, run the following command:

esxcli system snmp set -e no

or

From a PowerCLI command prompt while connected to the ESXi Host:

Get-VMHostSnmp | Set-VMHostSnmp -Enabled $false

See Also

https://workbench.cisecurity.org/benchmarks/23619

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258767r959010_rule, STIG-ID|ESXI-80-000212, Vuln-ID|V-258767

Plugin: Unix

Control ID: 472c90467d3cbd8dafb3b348037ec8aa199fa756aac8e46b1973fbd8ed9c3545