How can I disable the public SNMP community string in Statseeker
The 'public' community string has been flagged as insecure on our Pen Test vulnerability scans.
If the FreeBSD SNMP agent is in an active state, vulnerability / security scans may flag the SNMP agent and the default string as a concern.
1) To stop the agent automatically starting at bootup, edit the /etc/rc.conf
su
Enter the root password
cp /etc/rc.conf /etc/rc.conf_orig
vi /etc/rc.conf
Change the line bsnmpd_enable="YES" to
bsnmpd_enable="NO"
Make your changes and save the file.
:wq!
2) The following is for additional security, the section above disables the agent form starting whereas the changes bleow will disable the community strings
cp /etc/snmpd.config /etc/snmpd.config_orig
vi /etc/snmpd.config
Change the value begemotSnmpdCommunityDisable = 1 to
begemotSnmpdCommunityDisable = 0
Make your changes and save the file.
:wq!
3) The snmp service daemon will need to be stopped to disable the agent that is running and for the file changes to take effect.
service bsnmpd stop
4) If required log a ticket for assistance stating where additional support is required
1) To stop the agent automatically starting at bootup, edit the /etc/rc.conf
su
Enter the root password
cp /etc/rc.conf /etc/rc.conf_orig
vi /etc/rc.conf
Change the line bsnmpd_enable="YES" to
bsnmpd_enable="NO"
Make your changes and save the file.
:wq!
2) The following is for additional security, the section above disables the agent form starting whereas the changes bleow will disable the community strings
cp /etc/snmpd.config /etc/snmpd.config_orig
vi /etc/snmpd.config
Change the value begemotSnmpdCommunityDisable = 1 to
begemotSnmpdCommunityDisable = 0
Make your changes and save the file.
:wq!
3) The snmp service daemon will need to be stopped to disable the agent that is running and for the file changes to take effect.
service bsnmpd stop
4) If required log a ticket for assistance stating where additional support is required