FireEye - SNMP v3 uses AES instead of DES

Information

If SNMP v3 users are configured, they can use either DES or AES-128 for confidentiality. The default is AES-128.

Solution

Edit the configuration and modify this line:\n

snmp-server user <username> v3 prompt auth sha priv aes-128\n
Enter passwords when prompted.

Item Details

Audit Name: TNS FireEye

Category: ACCESS CONTROL

References: 800-53|AC-17(2)

Plugin: FireEye

Control ID: 47e775fff290b9b3bd51490cb93597ea0f0fa20a6226e33d868c62af793727fa