Rule ID
SV-286598r1290957_rule
Version
V1R1
CCIs
SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contain well-known security weaknesses that can be easily exploited. As such, SNMPv1 and SNMPv2 receivers must be disabled. If SNMP is not being used, it must remain disabled. If SNMP is enabled but not properly configured, monitoring information can be sent to a malicious host that can then use this information to plan an attack.
Log in to the UAG administrative interface as an administrator. Select "Configure Manually". Navigate to Advanced Settings >> System Configuration. Click the gear icon. If the "Enable SNMP" toggle is set to "On", and the "SNMP Version" dropdown is set to "SNMPv1+SNMPv2c", this is a finding.
Log in to the UAG administrative interface as an administrator. Select "Configure Manually". Navigate to "Advanced Settings" >> "System Configuration". Click the gear icon. Either set the "Enable SNMP" toggle to "Off", or set it to "On", and ensure the "SNMP Version" is set to "SNMPv3", then fill in all required fields. Click "Save".