Creating an SNMP profile

The created profile is applied only with an enabled Use SNMP toggle switch.

The maximum number of profiles is 100.

You can create SNMP profiles in network templates or on a Kaspersky NGFW device: An SNMP profile created in a network template is automatically created on all devices that use this template.

To create an SNMP profile:

1. In the main menu of the Open Single Management Platform Console, go to the Application & Services → NGFW section.
2. Create an SNMP profile in one of the following ways:
   • If you want to create an SNMP profile in a network template, in the menu, select the Network templates tab, click the network template, and select the System → SNMP → Profiles section.
   • If you want to create an SNMP profile on a device, select the Devices tab in the menu, click a device, and select the System → SNMP → Profiles section.

   The table of SNMP profiles is displayed.

3. In the upper workspace, click Create.

   This opens the SNMP profile creation window.

4. Set the Status toggle switch to On.
5. In the Name field, enter a name for the profile. The name must satisfy the following requirements:
   • Must be unique in the table of profiles.
   • No more than 32 characters.
   • Only Latin lowercase and uppercase letters, numerals, and the "_" character are allowed.
   • Must start with a letter or numeral.
6. If you want to use specific OIDs in SNMP traps, select an OID view to add to the profile.
7. Specify the SNMP version.
8. Fill in the required fields:
   • If the SNMP protocol version is v1 or v2c, enter an SNMP community string in the Community name field.

     The community string is used as a password which the SNMP manager uses to connect to SNMP agents. The default value is public, which provides read-only access. We recommend changing the default to a more secure and unique community string to ensure reliable communication between your SNMP manager and SNMP agents.

   • If you selected SNMPv3, fill in the User name, Authentication password, and Privacy password fields.

     SNMPv3 provides a higher level of security thanks to the use of a user authentication algorithm (SHA256 and SHA1) and a message encryption algorithm (AES).

   Encryption at the TLS level is not supported.

9. Specify the values for Trap server setting:
   1. Set the toggle switch to On to enable the use of a SNMP trap server. If disabled, SNMP traps are not sent.
   2. Specify the IP address or hostname of the server.
   3. Specify the port from which you want SNMP agents to send traps. Port 162 is used by default.

   You cannot specify the same server address and port in multiple profiles.

10. Click Create to save your changes and create the profile.

The new SNMP profile is added to the table.

Page top