cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Valued Member
Valued Member

Changing SNMP

My security team requested i change the default SNMP string due to some risks that they identified

 

Where all do i need to make the change? This is what immediately comes to mind.

In the driver: Configuration tab>SNMP Community Name>Setup (blank by default, so type in private?)

 

In the driver: Ports tab>Configure Port> Change community name to private

 

Centerware Internet services: Properties tab>Connectivity>Setup>SNMP

 

any help would be appreciated.

0 Kudos
3 Replies
Highlighted
Analyst Nation Moderator
Analyst Nation Moderator

Re: Changing SNMP

Are you aware you at no point listed a machine? We have no idea what printer you are asking about.

 

What is your security team asking of you? What are you asking of us?

 

You already listed all the right places, at least for some products with CWIS, you go exactly where you stated.

1.GIF

 

Private would be not much more secure than public is in reality since both are just SNMP defaults. Might want to make something up entirely, but whatever you choose on the machine will have to manually added to the port on the Windows PC, or all the great two way comm will break and the driver will forget things like what finisher it has, and wont have any idea what paper and toner status is.

 

Did your security team find this from an automated scan then send the results to you but not actually tell you what the issue should be resolved using?

Please be sure to select "Accept Solution" and or select the thumbs up icon to enter Kudos for posts that resolve your issues. Your feedback counts!

Joe Arseneau
0 Kudos
Highlighted
Valued Member
Valued Member

Re: Changing SNMP

I apologize, I was in a panic with info sec breathing down on me.

 

Here is a clearer explenation of whats going on...

 

The machines im asking about are ColorQube 9301, 9302, 8700, 8900 and Workcentre 7835. I was basically asking if the change is made on the driver, do any changes need be made on the printers themselves.

 

Also I use Xerox Device Agent hosted on a server so i wanted to be sure that all the changes were made properly so that it doesnt interfere with communications.

 

Security team ran a vulnerability test and the SNMP string used by default was flagged as a potential vulnerability, they asked that i change the default string.

 

Being i can access CWIS on all the machines it seems that might be the quickest way?

 

Thanks again for the assistance

0 Kudos
Highlighted
Analyst Nation Moderator
Analyst Nation Moderator

Re: Changing SNMP

CWIS is the only way to change it, you definitely need to change the driver ports if you do so, I am not sure on XDA, But page 24 of the User guide makes me think it will definitely need to be changed there too.

Please be sure to select "Accept Solution" and or select the thumbs up icon to enter Kudos for posts that resolve your issues. Your feedback counts!

Joe Arseneau
0 Kudos