I have Sophos firewall and I want to monitor it. According to https://www.zabbix.com/integrations/sophos snmpv2 is okey, But snmpv2 has security problem. Do you have any idea?
-
-
We have a lot of ideas! But what do you care about them?
:-) -
You could use snmpv3, for start?Comment
-
Hi,
I configured Zabbix to connect to the Sophos XG appliance with AuthPriv SHA256 and Privacy Protocol AES256, password/passphrase are both unique and correct (copy pasted), no chance of any typing error here.
I did set context name and security name with the same string as well as for the username on the Sophos XG under SNMPv3.
SNMPv2 with community string works fine.
Note that the Host templates I used are Network Generic Device SNMP and sophosxg-mib that I tried to import and it appears to work, if that even does matter with the SNMPv3 config, which I doubt. But who knows!?
On the host list, I see the entry for the v3 as "Unknown".
I suspect the encryption algorithm could be inadequate as on the Sophos XG the options are AES, DES or none. As for AES, there's no option to select, let's say, AES256 or AES512. Any hint on this as to which encryption strength is supported by Sophos XG 210?Comment
-
Here's some additional detail as I am not able to update my previous post:
Almost forgot to mention that I checked Accept queries and Sent Traps + I set the authorized server IP of Zabbix.
As for the general SNMP settings, agent port is 161 and manager port is 162.Comment
Comment