UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The administrator must ensure SNMP is blocked at all external interfaces.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3022 NET0892 SV-3022r2_rule Medium
Description
SNMP information can be used to trace the network and reveal networks topology that could enable malicious users to gain access to network devices.
STIG Date
Perimeter Router Security Technical Implementation Guide Juniper 2017-03-09

Details

Check Text ( C-3938r2_chk )
Review the ingress filter and verify SNMP has been restricted. SNMP operates on the TCP/UDP port 161.
Fix Text (F-3047r1_fix)
The administrator will change the router configuration to block SNMP traffic at the perimeter.