[Ach] Securing SNMP
azet at azet.org
Tue May 20 10:15:33 CEST 2014
Joe St Sauver wrote:
> include a section on hardening SNMPv3 appropriately (I don't think
> there's any discussion of SNMP current in the draft).
We've discussed this issue repeatedly: Like LOM/Remote Management SNMP
should not be available from a routed network (i.e. use a private VLAN).
There are tons of problems with that, popular vendors (dell, hp)
regularly have exploits or DDoS problems with their embedded remote
management and SNMP stacks.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 801 bytes
Desc: OpenPGP digital signature
More information about the Ach