SNMP Security

[Marty Creamer]

Our security department wants us to secure SNMP or shut down the SNMP service. I am new at supporting HP SIM due to attrition. Is SNMP required by HP SIM? If so, what steps need to be taken to secure SNMP? We have to change the community strings so they can't be guesses, filter the UDP ports, and secure the SNMP communications. Can anyone recommend any documents (HP or MS or otherwise) to get these tasks performed?

[Rob Buxton]

Yes HPSIM needs SNMP.
The community names need to be changed on HPSIM and the clients.
Note community names are case-sensitive so you can get fairly complex.

On the client servers you can restrict what servers SNMP allows, typically you will need localhost plus the HPSIM server.