STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).

DISA Rule

SV-283409r1194921_rule

Vulnerability Number

V-283409

Group Title

SRG-APP-000395-NDM-000310

Rule Version

ASMP-ND-000830

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure the system to use SNMPv3:

cli% setsnmpmgr <ip_address> -p <port> -version 3

Note: The system supports both IPv4 and IPv6 addresses for the SNMP Host.

Check Contents

Verify the system is configured to use SNMP v3 with the following command:

cli% showsnmpmgr
HostIP Port SNMPVersion User Notify AlertClear
16.172.70.200 162 3 Alletrasnmpuser standard standard

If the "HostIP" is blank, this is a finding.

If "SNMPVersion" is not set to "3", this is a finding.

Vulnerability Number

V-283409

Documentable

False

Rule Version

ASMP-ND-000830

Severity Override Guidance

Verify the system is configured to use SNMP v3 with the following command:

cli% showsnmpmgr
HostIP Port SNMPVersion User Notify AlertClear
16.172.70.200 162 3 Alletrasnmpuser standard standard

If the "HostIP" is blank, this is a finding.

If "SNMPVersion" is not set to "3", this is a finding.

Check Content Reference

M

Target Key

5742