topic Re: SNMPV3 TRAPS PORT 162 in Spark Firewall (SMB)

SNMPV3 TRAPS PORT 162

K_montalvo — Mon, 18 Apr 2022 20:57:52 GMT

Hello experts,

I have a very basic knowledge of SNMP, i looking to know if theres a way to see where SNMP traps are stored (if they are stored witch i really don't know) or maybe to see them working live via CLI. I'm speaking this visualizing it from the SMB firewall point.

Thanks!

Re: SNMPV3 TRAPS PORT 162

G_W_Albrecht — Tue, 19 Apr 2022 05:43:26 GMT

sk90860: How to configure SNMP on Gaia OS

sk40622: SNMPv3 USM (User-based Security Model) User

sk98552: Best Practices - SNMP

sk90470: Check Point SNMP MIB files

sk65923: How to configure the cluster to send SNMP Trap upon failover

sk170155: SMB appliances report incorrect value for SNMP sysObjectID

sk171750: Security Gateway stops responding to SNMP polling requests after an upgrade to R80.20.15

sk153054: OID polling does not show expected results on SMB Appliances with version R77.20.86

Re: SNMPV3 TRAPS PORT 162

K_montalvo — Tue, 19 Apr 2022 13:50:55 GMT

@G_W_Albrecht Hello buddy thank you for posting very helpful information. What i am actually looking to do is be able to track just for troubleshooting trying to see the SMNP trap being sent to the SNMP manager (NMS). The manager witch is a SIEM-Splunk would indexed listening on port162 and then operator would be able to query from there. But actually im just curious to learn where can i see this actually when sent to the (NMS).

Re: SNMPV3 TRAPS PORT 162

G_W_Albrecht — Tue, 19 Apr 2022 14:16:33 GMT

I can only point to where it is configured on SMBs: https://sc1.checkpoint.com/documents/SMB_R80.20.40/Help/Locally_Managed/EN/Topics/SNMP.htm?Highlight=SNMP

Re: SNMPV3 TRAPS PORT 162

K_montalvo — Tue, 19 Apr 2022 15:52:29 GMT

@G_W_Albrecht Yes i was able to see that with the previous provided links. For that i will normally use snmp walk commands , however im looking to see them from the other part when they are sent via port 162 SNMPv3.

Re: SNMPV3 TRAPS PORT 162

G_W_Albrecht — Tue, 19 Apr 2022 16:43:15 GMT

So you did configure that all on SMB but you see no alerts from traps in NMS ?