← Back to HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide

V-283073

CAT II (Medium)

The HPE Alletra Storage ArcusOS device must have an SNMPv3 user account configured.

Rule ID

SV-283073r1193911_rule

STIG

HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-003831

Discussion

Audit information includes all information needed to successfully audit system activity, such as audit records, audit log settings, audit reports, and personally identifiable information. Audit logging tools are those programs and devices used to conduct system audit and logging activities. Protection of audit information focuses on technical protection and limits the ability to access and execute audit logging tools to authorized individuals. Physical protection of audit information is addressed by both media protection controls and physical and environmental protection controls.

Check Content

Verify an SNMPv3 user account is configured:

cli%  showsnmpuser

Username        AuthProtocol PrivProtocol
Alletrasnmpuser HMAC-SHA-96  CFB128-AES-128

If the output is not displayed in the above format, this is a finding.

Fix Text

Configure SNMPv3 alert notifications using the following sequence of operations:

Create and enable an SNMPv3 user, and create associated keys for authentication and privacy.

cli% createuser Alletrasnmpuser all browse

Enter the password and confirm.

cli%  createsnmpuser Alletrasnmpuser

At the prompt, enter the password.

At the next prompt, reenter the password.