Do you change your SNMP strings?

[Dashrender]

I just ran the Tripwire scan on my network and it's rather unhappy with the default SNMP strings.

Thoughts, comments?

[scottalanmiller]

Yes. SNMP should never use default strings. It's like having the password be "password".

[alexntg]

It depends on the device. For something like an ASA, I just open up SNMP inbound from the management station IP addresses. Other IPs won't even know it has SNMP. If it moves data (switches, APs, etc.) I change the SNMP string. Other devices, such as printers, are based on the environment.

[Dashrender]

Thanks. I have some work to do.