The SNMP service on the storage system must use only SNMPv3 or its successors.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-237821 | HP3P-32-001303 | SV-237821r647872_rule | Medium |
| Description |
| SNMP Versions 1 and 2 are not considered secure. Without the strong authentication and privacy provided by the SNMP Version 3 User-based Security Model (USM), an attacker or other unauthorized users may gain access to detailed system management information and use the information to launch attacks against the system. |
| STIG | Date |
| HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide | 2021-11-23 |
Details
| Check Text (C-41031r647870_chk) |
| Verify that SNMPv3 is enabled by entering the command: cli% showsnmpmgr HostIP Port SNMPVersion User <IP address of SNMP manager> 162 3 <username> If the SNMPVersion is not 3, this is a finding. |
| Fix Text (F-40990r647871_fix) |
| Configure the OS to use SNMPv3 by entering the command: cli% setsnmpmgr -snmpuser 3parsnmpuser -pw <password> -version 3 <IP address of SNMP manager> |