UCF STIG Viewer Logo

Network devices must only allow SNMP access from addresses belonging to the management network.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3021 NET0890 SV-3021r3_rule Medium
Description
Detailed information about the network is sent across the network via SNMP. If this information is discovered by attackers it could be used to trace the network, show the networks topology, and possibly gain access to network devices.
STIG Date
Perimeter Router Security Technical Implementation Guide 2018-11-28

Details

Check Text ( C-3586r8_chk )
Review the device configuration and verify it is configured to only allow SNMP access from addresses belonging to the management network.

If the device is not configured to filter SNMP from the management network only, this is a finding.
Fix Text (F-3046r4_fix)
Configure the network devices to only allow SNMP access from only addresses belonging to the management network.