STIGQter: STIG Summary: HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 28 Jul 2017:

The SNMP service on the storage system must use only SNMPv3 or its successors.

DISA Rule

SV-85117r1_rule

Vulnerability Number

V-70495

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

HP3P-32-001303

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the OS to use SNMPv3 by entering the command:

cli% setsnmpmgr -snmpuser 3parsnmpuser -pw <password> -version 3 <IP address of SNMP manager>

Check Contents

Verify that SNMPv3 is enabled by entering the command:

cli% showsnmpmgr
HostIP Port SNMPVersion User
<IP address of SNMP manager> 162 3 <username>

If the SNMPVersion is not 3, this is a finding.

Vulnerability Number

V-70495

Documentable

False

Rule Version

HP3P-32-001303

Severity Override Guidance

Verify that SNMPv3 is enabled by entering the command:

cli% showsnmpmgr
HostIP Port SNMPVersion User
<IP address of SNMP manager> 162 3 <username>

If the SNMPVersion is not 3, this is a finding.

Check Content Reference

M

Target Key

3013

Comments