On a Cisco PIX firewall, I wanted to check if SNMP is enabled:
pix# sh snmp-server
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
Is SNMP enabled on this device?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this communityYes it is. The default configuration for the snmp server is enabled. If you do a sh run all | i snmp
you should see a snmp-server enable
line in your configuration. However if you'd like to actually use the snmp server you'll need to add a snmp-server host x.x.x.x
command to the config.
no snmp-server enable
and you should always remove the public community string with a no snmp-server community public
It's not currently a security risk but these are best practices for locking down an ASA.
– resmon6
Feb 7 '12 at 14:24