SNMP

---

Konfiguration of SNMP-Monitoring

Last adaptation to the version: 12.6.0

New:

• Updated to Redesign of the webinterface

notempty

This article refers to a Resellerpreview

12.2.1 11.8.5 11.7 11.6.11

Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115 Network Server configuration  Area SNMP

---

Introduction

The SNMP protocol is used for monitoring, error detection and error notification and is standardized.
The SNMP configuration of the UTM generally allows read-only access.
The UTM supports the following version of the SNMP protocol:

• SNMP version 1
• SNMP version 2c
• SNMP version 3

Version 3 of the SNMP protocol allows encrypted communication. SHA1 and AES are used for encryption.

notempty

If this data is requested, SNMP version 3 must be used for data protection reasons mandatory!

---

Configure UTM

Enable SNMP

SNMP Version 1 and 2c

Caption	Value	Description	Server configuration UTMuser@firewall.name.fqdnNetwork Servereinstellungen SNMP 1 und 2c
SNMP Version:	12c3	Choose prefered version
Edit Community String:	public	These versions use a community string that must be entered here.
Add Network	203.0.113.0/24	Opens a window in which a new network can be created. notempty If a network is to be shared, the exact network address must be selected.
Delete		Löscht das Netzwerk
Save		Saves the settings
SNMP Version 3
SNMP Version:	12c3	Choose prefered version	Servereinstellungen SNMP 3
SNMP Version 3 Username:	snmpv3user	Enter username
SNMP Version 3 Password:	••••••••••	Enter password
Save		Saves the settings

After the SNMP setup is completed, the SNMP service should be checked under Applications Application Status and started if necessary.

Packet filter rule

Für den Zugriff auf den SNMP Dienst wird eine Paketfilterregel benötigt. Diese kann unter Firewall Packetfilter  Button Regel hinzufügen hinzugefügt werden.

General			Paketfilter UTMuser@firewall.name.fqdnFirewallPaketfilter Paketfilterregel erstellen
Source:	Monitoring Server	Network object that contains the host or network that will access the SNMP service
Destination:	internal-interface	The interface via which the UTM is reached
Service:	snmp	Choose SNMP
Add and close		Speichert die Regel und schließt den Erstellungsdialog.
Update Rules		Must be clicked for the rule to be finally activated.

OIDs

The SNMP section of the Securepoint Reseller Portal in the download area contains a .mib file that contains all OIDs currently available on the UTM with description and can be imported into common monitoring applications.
An overview of the most important OIDs that can be queried can be found in the article SNMP-OIDs .