The created profile is applied only if the Use SNMP toggle switch is enabled.
The maximum number of profiles is 100.
You can create SNMP profiles in network templates or on a Kaspersky NGFW device: An SNMP profile created in a network template is automatically created on all devices that use this template.
To create an SNMP profile:
In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW section.
Create an SNMP profile in one of the following ways:
If you want to create an SNMP profile in a device template, in the menu, select the Network templates tab, click the device template, and select the System → SNMP section.
If you want to create an SNMP profile on a Kaspersky NGFW device, select the Devices tab in the menu, click a Kaspersky NGFW device, and select the System → SNMP section.
The table of all SNMP profiles is displayed on the Profiles tab.
In the upper workspace, click Create.
This opens the SNMP profile creation window.
Set the Status toggle switch to On.
In the Name field, enter a name for the profile. The name of the profile must be unique among all profiles.
The name must satisfy the following requirements:
No more than 32 characters.
Only Latin lowercase and uppercase letters, numerals, and the "_" character are allowed.
Must start with a letter or numeral.
If necessary, select an OID view to add to the profile to use certain OIDs in SNMP traps.
Specify the SNMP version.
Fill in the required fields:
If the SNMP protocol version is v1 or v2c, enter an SNMP community string in the Community name field. SNMP community string.
The community string is used as a password which the SNMP manager uses to connect to SNMP agents. The default value is public, which provides read-only access. We recommend changing the default to a more secure and unique community string to ensure reliable communication between your SNMP manager and SNMP agents.
If you selected SNMP v3, fill in the User name, Authentication password, and Privacy password fields.
SNMP v3 provides a higher level of security thanks to user authorization and message encryption:
The AES encryption algorithm is supported.
The SHA256 authorization algorithm is supported.
Encryption at the TLS level is not supported.
Specify the values for Trap server setting:
Set the toggle switch to On to enable the use of a SNMP trap server. If disabled, SNMP traps are not sent.
Specify the IP address or hostname of the server.
Specify the port from which you want SNMP agents to send traps. Port 162 is used by default.
You cannot specify the same server address and port in multiple profiles.
Click Create to save your changes and create the profile.