RE: SNMP security

From: Labelle, Michel (mlabelle@city.coquitlam.bc.ca)
Date: 11/20/01 

Message-ID: <EE01A929D54AD41195170008C7E656EA01BEA3E9@pandora.private.coquitlam.bc.ca>
From: "Labelle, Michel" <mlabelle@city.coquitlam.bc.ca>
To: "'Robert D. Hughes'" <rob@robhughes.com>
Subject: RE: SNMP security
Date: Tue, 20 Nov 2001 10:12:05 -0800

Robert, thanks for injecting a bit of sanity to this discussion. I have to
concur and say that any product is "bad" if you don't know what you are
doing. If you don't know what you are doing with SNMP and leave all the
defaults, you shouldn't be administering a network.

If you are willing to spend the time and effort to get it right, you will
end up with something much larger. For an example of SNMP / MRTG taken to
an extreme go to http://ardnoc82.canet3.net/CAnet3map/CAnet3map.htm

Michel Labelle
Manager Client/Network Services
City of Coquitlam

-----Original Message-----
From: Robert D. Hughes [mailto:rob@robhughes.com]
Sent: Monday, November 19, 2001 7:52 PM
To: Christopher Vittek; security-basics@securityfocus.com
Subject: RE: SNMP security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok.... I'm going to have to put on my enterprise management
specialist hat here for a minute and make some comments. Most of the
bad rap SNMP has comes from engineers that don't understand it, what
is, how to configure it, what network and systems management is, etc.

--snip

Relevant Pages

  • RE: SNMP security
    ... Subject: SNMP security ... ACL's....for network devices and servers, only a small number of IP's/hosts ... are allowed to communicate via SNMP. ... but the SNMP communities are long and not easily ...
    (Security-Basics)
  • RE: SNMP security
    ... Subject: SNMP security ... is, how to configure it, what network and systems management is, etc. ...
    (Security-Basics)
  • RE: SNMP security
    ... Subject: SNMP security ... True, but only if you're running a firewall that supports a SNMP proxy, ... However, devices have only very recently started to support SNMP V3, ...
    (Security-Basics)
  • RE: SNMP security
    ... Subject: SNMP security ... True, but only if you're running a firewall that supports a SNMP proxy, ...
    (Security-Basics)
  • RE: SNMP security
    ... Subject: SNMP security ... and most devices and management ... Openview Network Node Manager with the SNMP Research security pack. ...
    (Security-Basics)