SNMP from Outside

JoseCasanova said:

Hi Everyone,

I do have the same question. I tried to add an ACL exception Rule in System > Administration > Device Access - with no luck (SNMP Service is not within the service's list). Added the public IP (of my management server) in the SNMP configuration page.

Is there anyway to make SNMP reachable from the WAN port?

Thanks in advanced,

Jose

Hi Jose, with the release of MR3 today you can now connect SNMP via the WAN. Please note you will need to enable SNMP for the WAN Zone via the Device Access table (System > Administration > Device Access)

More information on MR3 can be found at https://community.sophos.com/products/xg-firewall/b/xg-blog/archive/2016/06/08/sfos-15-01-0-mr-3-released

in mr3 is snmp buggy. in acl rules the snmp type is missing. and additional you can only access snmp by interface ip where you come from.

in mr3 is snmp buggy. in acl rules the snmp type is missing. and additional you can only access snmp by interface ip where you come from.

Hi Marco,

To clarify, you can only access SNMP from the IP configured in the SNMP Community under "System > Administration > SNMP" so if you enable SNMP on the WAN you will only be able to access SNMP from the SNMP Managers IP Address with the specific “community” string, this is because you defined the SNMP Manager IP Address when creating the SNMP Community. To a large degree, this negates the need to manage a manual ACL.

I have not run into the issues you describe and I would suggest if they are an issue for you then you should open support tickets. If you are unsure of how to access support please check out https://secure2.sophos.com/en-us/support/contact-support.aspx

Thanks,

Leon