This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SNMP Scan on Interface WAN IP leads to confusing results

Hello,

we have tried if it's possible to do a SNMP scan against a routing device which stands in front of the UTM (Firewall). LAN is 192.168/16 private, WAN IP is a normal A-class net IP.

Mistakenly, to achieve this, we have used the WAN interface IP address of this device. Which strangely leads to SNMP answers from the UTM itself?
On our ***other vendor*** firewall a scan against the interface IP address was possible by only opening the needed UDP port outgoing without additional routing settings.

Is it possible at all to setup SNMP monitoring against that router without additional security risk?

Best regards,
SA

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

SA, what do you have in 'Allowed Networks' for SNMP access control?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 SmallAdmin over 10 years ago

Hello Bob,
I think I've got what you think, but it's only the two hosts that are actually allowed to scan the device from the INTERNAL network. No WAN or WAN IP here.

Thanks,
SA
Cancel
Vote Up 0 Vote Down

Cancel

SNMP Scan on Interface WAN IP leads to confusing results

Submitted a Tech Support Case lately from the Support Portal?