topic Re: How to configure SNMP V3 on checkpoint firewall in Firewall and Security Management

How to configure SNMP V3 on checkpoint firewall

Prime — Sun, 03 May 2020 16:34:15 GMT

I want to configure SNMP V3 on checkpoint firewall.
I have configured firewall in 3 different VSX instances.
Firewall GUI is not available in VSX mode to configure, kindly check attached screenshot for you reference.

Re: How to configure SNMP V3 on checkpoint firewall

Maarten_Sjouw — Sun, 03 May 2020 17:17:38 GMT

You begin with:
set snmp agent-version v3-Only
set snmp mode vs
set snmp agent on

Then to configure a user:
add snmp usm user <user> security-level authPriv auth-pass-phrase <PW-Auth> privacy-pass-phrase <PW- Privacy> privacy-protocol AES authentication-protocol SHA1

For VSX there are some more options, you can access the VS itself by it's own IP or access all through the VS0 IP with the following command:
set snmp vs-direct-access on/off
To make sure you are allowed to access each VS the following command is used:
set snmp usm user <user> vsid all/<VSID's>

Hope this helps.

Re: How to configure SNMP V3 on checkpoint firewall

Prime — Mon, 04 May 2020 14:41:45 GMT

Any posibilities to do SNMP configuration through smart console?

Re: How to configure SNMP V3 on checkpoint firewall

Maarten_Sjouw — Mon, 04 May 2020 17:26:55 GMT

Nope, not possible, only through the WebUI or CLISH and on VSX only through CLISH.

Re: How to configure SNMP V3 on checkpoint firewall

Prime — Wed, 06 May 2020 07:00:51 GMT

As you suggested, we did the configuration on checkpoint Gateway. Now checking the device discovery SNMP status with NMS team.