snmpcollector probe listening on port 9715 tcp

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Security scan flags port 9715/tcp, how do we disable this other than stopping the snmpcollector probe?

Can see flag “enable_database_servlet” already set to no

Environment

UIM 23.3
snmpcollector :4.13/4.14

Resolution

Current design till snmpcollector 4.14 GA is that when "enable_database_servlet"  is not enabled , it stops only database page on localhost:9715 but we are not restricting Metrics tab and other tabs those are still available

and below setting if required to enable this 

enable_database_servlet = yes 

 

For the current use case if the the entire functionality is to be disabled i.e no access to metrics also 

 

snmpcollector 4.14T1 is attached to this KB 

Follow below steps to deploy the fix 

1. Deactivate snmpcollector probe and take backup of entire snmpcollector folder on the server.
2. Deploy test build and add below configuration key in the setup section of the snmpcollector probe:
3. enable_h2_db_port = false
4. Activate the probe and validate the fix.

SHA-256 checksum for snmpcollector.zip 

877250f299c6966c9825c6a2723068349a8844ddd9d2aba3ef6d342bce707762