topic Re: Stealthwatch snmp issue in Network Security

Stealthwatch snmp issue

KacyHicks21882 — Tue, 19 Apr 2022 14:35:54 GMT

We are using version 7.3.2 and snmp is not connecting to the network equipment, I confirmed the username and password were correct, then using Splunk checked for traffic from the SMC to random network equipment and am not seeing any traffic from the SMC or the FC to the IPs. What could be wrong and where should I start looking?

Re: Stealthwatch snmp issue

balaji.bandi — Tue, 19 Apr 2022 19:02:14 GMT

try to remove all the config and start again and check. is this SNMPv3 ? or v2 ?

Re: Stealthwatch snmp issue

KacyHicks21882 — Tue, 19 Apr 2022 19:25:55 GMT

balaji, it wasnt working for either version. As it turns out we had a few issues, first snmp was not enabled like it should have been by default. Second there is a bug that affects version 7.3.2 that is stated to be resolved and is not, it causes the snmp service to stall and restarting docker resolves the problem. Third there is another bug that affects 7.3.2 that prevents the system from accepting the pw entered and displays pw cannot be blank. There is a rollup patch available to resolve this issue.