pix501 and snmp

[mialbert]

i am wanting to open up snmp on a pix 501 6.3 version.  I am planning on doing it with the following configuration:

snmp-server host outside <ip address of outside system>

snmp-server community <string>

snmp-server enable traps

I noticed you cannot specify RO on the snmp-server command with the older pix.  I don't want this configuration to open up any write access to the pix.  Is there a way to specify only read only for snmp

[Jennifer Halim]

By default it's RO.

Here is the command for your reference:

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/s.html#wp1191051

Quoted from the above URL:

All SNMP values in the PIX Firewall are read only (RO)