Re: [FW1] SNMP on FW-1 machine

["Aaron D. Turner" <aturner@FW1-NOSPAMonesecure.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


It does not need to be running/installed and almost without exception you
should get rid of it due to the security implications.  (The only time I
can see it running is if you're using a SNMPv3 agent utilizing encryption
and strong authentication.)

- -- 
Aaron D. Turner  Security Architect, OneSecure  http://www.onesecure.com/
aturner@onesecure.com  work:cell:pub  1024D/1B57EB4D 2000-09-27 Aaron D. Turner <aturner@onesecure.com>
     Key fingerprint = F90C BFB4 4404 5504 295D  4435 578B 1DD5 1B57 EB4D
All emails by me are PGP signed; an invalid signature indicates a forgery.

On Thu, 14 Dec 2000, Wonder Kid wrote:

>
> Hi,
>
> Does anyone know whether FW-1 need SNMP services to be
> turned on on NT4 or Solaris?
>
> If SNMP service is turned on NT4 or Solaris with FW-1
> installed, and no further configuration is done, i.e.
> community strings etc were not changed, does it has
> impact on FW-1?
>
> Microsoft had just released patches to resolve the
> registry key vulnerability related to SNMP
> (http://www.microsoft.com/technet/security/bulletin/fq00-095.asp).
> The notes mentioned that such vulnerability could
> allows others to misconfigure the firewall. Not fully
> understand how FW-1 worked on SNMP, I wish to seek
> comments from the group on this vulnerability.
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Shopping - Thousands of Stores. Millions of Products.
> http://shopping.yahoo.com/
>
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Public key 0x1B57EB4D at: http://www.keyserver.net/en/
Filter: gpg4pine 4.1 (http://azzie.robotics.net)

iEYEARECAAYFAjo5gV0ACgkQV4sd1RtX600eXQCdEhPBkAK2IPqdrrgz/P1rgp85
sYkAn2M7Shgf4Ji7PkthysrkSptB+gKR
=lJKF
-----END PGP SIGNATURE-----



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================