UCF STIG Viewer Logo

The SNMP service must require the use of a FIPS 140-2 approved encryption algorithm for protecting the privacy of SNMP messages.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22449 GEN005307 SV-38891r1_rule DCNR-1 Medium
Description
The SNMP service must use AES or a FIPS 140-2 approved successor algorithm for protecting the privacy of communications.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-37889r1_chk )
NOTE: This will virtually always require a manual review. Determine if the SNMP service uses a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods. The NIST CVMP web site provides a list of validated modules and the required security policies for the compliant use of such modules. Verify the module is on the NIST list and configured in accordance with the validated security policy. If it does not, this is a finding.
Fix Text (F-33139r1_fix)
Configure the SNMP service to use a FIPS 140-2 approved encryption algorithm for protecting the privacy of SNMP messages.