+NET.1.2.A10 Limitation of SNMP Communication (B)

NET.1.2.A10 Limitation of SNMP Communication (B)

In principle, insecure versions of the Simple Network Management Protocol (SNMP) MUST NOT be used in network management. If insecure protocols are nevertheless used and not secured via other secure network protocols (e.g. VPN or TLS), a separate management network MUST be used. As a matter of principle, SNMP SHOULD ONLY be used for access with the minimum access rights required. The access authorisations SHOULD be limited to dedicated management servers.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.15 Eavesdropping
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation