topic snmp on asa in Network Security

snmp on asa

jvardhan29 — Mon, 11 Mar 2019 20:16:02 GMT

hi experts

i was going through the asa documentation for snmp inspection and it doesnot mention much about snmp inspection . if the traffic is going from one snmp host to a destination snmp server passing asa , will inspect snmp required ? if yes , will it nat the IP header or the payload also just like dynamic protocols like sip and ftp .

Re: snmp on asa

cciesec2011 — Sat, 02 Apr 2011 10:32:51 GMT

ASA by itself, does NOT inspect snmp inspection. In order to inspect SNMP, I think you will need the add-on SSM module to perform this kind of function. But that's my guess.

I come from Checkpoint environment and Checkpoint behaves the same way. In order to inspect snmp on Checkpoint, an addition IPS blade (aka SmartDefence prior to NGx R70) is required.

Re: snmp on asa

jvardhan29 — Sat, 02 Apr 2011 10:39:01 GMT

thanks for the information , this one is also helpful , but i would rquire cisco experts to comment on the same as i am interested in the inspect snmp details from their perspective.