snmp-server user CSCOJason network-admin v3 auth md5 password1

123 Pages·2016·5.54 MB·English

by  Decca Design

Securely Managing Your Networks
With SNMP
Gilbert Bollinger, Solutions Architect
BRKNMS-2658
Housekeeping
• Please remember this is a 'non-smoking' venue!
• Please mute your mobile devices
• Please make use of the recycling bins provided
• Please remember to wear your badge at all times
BRKNMS-2658 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Agenda
Introduction
•
Balancing Security with Manageability
•
The World of SNMP v2
•
Securely using SNMPv3
•
SNMP in the Wild
•
Conclusion
•
Abstract
• This technical session explains the concepts, issues, and current capabilities in
network management with Simple Network Management Protocol (SNMP) v3.
We will compare and contrast the functionality of SNMP v1, v2c, and v3. A
considerable amount of time will be spent covering SNMPv3 and understanding
how to configure its usage. We'll discuss the benefits and challenges with its
implementation, along with application, device support and instrumentation.
• And finally, you'll learn what to look for when considering network management
tools and applications that use SNMPv3 to ensure proper and efficient
functionality.
• Target Audience - All network administrators
BRKNMS-2658 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
Balancing Manageability with Security
• Balance the business needs of operational visibility AND security
• Perform cross team collaboration to help achieve common goals
• Recognize that both parties have different perspectives
• Reasonable compromises may be possible as we understand each other’s
needs/concerns
• Understand that Manageability and Security are equal partners
BRKNMS-2658 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Network Security Goals
• Traditional categories:
• Data confidentiality
• Data integrity
• Data availability
• Traditional approaches:
• Maintaining Compliance
• Restrict access to authorized users
• Obscure devices from attackers
• Identify/locate vulnerabilities
• Identify network threats
BRKNMS-2658 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Value of Manageability
• Understand what’s in your network through inventory collection
• Gather device configurations for operational needs & compliance evaluation
• Determine whether your network is running efficiently
• Awareness when your network technologies are not operating within acceptable
tolerances
BRKNMS-2658 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Finding a Balance
• Identify and Define Your Policies
• Understanding Your Business Requirements
• Compliances with the applicable frameworks
• HIPAA DPA
• S-Ox PCI DSS
• FIPS DISA STIG
Manageability
• Resource
requirements Security
and constraints
• Risk assessment
BRKNMS-2658 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
The World of SNMP v2