RE: Vulnerabiltiy scan result - The remote SNMP server replies to the following default community string : public -- MIDRANGE-L

I think the SNMP config data was not migrated from P5 to P7 back in 2012.
Either SNMP data was not backed up or failed to be restored.
This occurred on both LPARs.
Does anyone know where the SNMP config data is stored?

I checked all the QSYS/QAZCA** files, all contain zero records.

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Tuesday, September 01, 2015 4:55 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Vulnerabiltiy scan result - The remote SNMP server replies to the following default community string : public

1) I recreated the community that was somehow deleted.
2) Should public be deleted?
3) Why don't I see SNMP in OpsNav under Servers TCP/IP?

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Tuesday, September 01, 2015 3:05 PM
To: Midrange Systems Technical Discussion
Subject: RE: Vulnerabiltiy scan result - The remote SNMP server replies to the following default community string : public

Be sure your community name is not "public" or set automatic start to *NO if you don't have anything configured to monitor SNMP alerts being sent

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Tuesday, September 01, 2015 2:59 PM
To: 'Midrange Systems Technical Discussion'
Subject: Vulnerabiltiy scan result - The remote SNMP server replies to the following default community string : public

1) I recently received this vulnerability scan from our corporate security admin.

The remote SNMP server replies to the following default community string : public

Solution: Disable the SNMP service on the remote host if you do not use it.
Either filter incoming UDP packets going to this port, or change the default community string.

I'm not sure what exactly I should be looking at, possibly disabling.
How do I know if being used?

CFGTCP
1. Configure SNMP agent
???

2) Could a previous i5/OS upgrade have removed a community I had setup other than the default of public.
I remember setting one up back in 2008, entry is now gone, both LPARs.

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.