Integrating SNMP on SPANVA console

Products

• CASB Audit
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

Some recommendations while configuring SNMP on the SPANVA console.

Environment

SPANVA: : 1.15.3.140.22rc and above

Resolution

Below is the sample SNMP config file for testing which provides guidelines to configure production SNMP config file for SPANVA:

 

Test user access to SNMP:
snmpwalk -v3 -u example_spanva_user_snmp -l authNoPriv -a MD5 -A example_spanva_password_snmp <customer spanVA IP>

 

In above command default user and password of spanVA snmp server password.
User Name : example_spanva_user_snmp
Password : example_spanva_password_snmp

 

Sample config below:

 

 

Explanation of the above SNMP configuration:

In the first scenario: ConfigUser is assigned to the ConfigGroup and may only use SNMP security model 2c, ConfigGroup can use the SystemView, SystemView is assigned to two OID sub-trees, and all of this is referenced in the SNMP poll by the secret and unique community string: 'idv90we3rnov90wer'.
In the second scenario: AllUser is assigned to AllGroup and may only use SNMP security model 2c, AllGroup can use the AllView, AllView is assigned to the entire OID tree, and all of this is referenced in the SNMP poll by the secret, and unique community string: '209ijvfwer0df92jd'.

SNMPWalk:
snmpwalk -v 2c -c examplestring1 -O e 127.0.0.1
snmpwalk -v 2c -c examplestring2 -O e 127.0.0.1

This is how most SNMP admins configure the SNMP conf file, add users and use that to do snmp-walks.