How can we help?

How to Enable SNMP on Sophos UTM Firewalls

Follow

To enable SNMP on Sophos UTM firewalls, you’ll first need administrator access to the device, and be logged into the administrative console.

Basic Settings - SNMPv2c

  1. From the left-hand menus, navigate to Management, then SNMP.
  2. Under the Query tab, enable SNMP queries.
  3. Under SNMP Version, select SNMP v2c.

    Screen_Shot_2021-05-05_at_2.43.04_PM.png

  4. Under SNMP Access Control, select the  “+” symbol in the Allowed Networks box to add allowed networks which can access your firewall via SNMP. You can either allow it for all networks or limit it to the Auvik collector’s IP address.
  5. Add your SNMP community string.
  6. Click on Apply to save your configuration.

Note – Allowed characters for the community string are: (a-z), (A-Z), (0-9), (+), (_), (@), (.), (-), (blank).

SNMPv3

If you're looking to set up SNMPv3, choose the version accordingly on the previous “Basic Settings” step: 

  1. From the left-hand menus, navigate to Management, then > SNMP.
  2. Under the Query tab, enable SNMP queries. Click on SNMP Query and enable SNMP.
  3. Under SNMP Version, select SNMPv3.

Once you select v3, the menu will change. Instead of the community string field in the Allowed Networks box, you will see sections to configure users (see screenshot below). 

  1. Add the SNMPv3 username.
  2. Add a password for this user. The password must be at least eight characters long. 
  3. SNMPv3 uses SHA for authentication and AES for encryption. Note that username and password are used for both of them.

    Screen_Shot_2021-05-05_at_2.43.54_PM.png

  4. Click on Apply to save your configuration.

All done! Your Sophos UTM firewall can now be discovered and monitored using Auvik.

Reference: https://community.sophos.com/utm-firewall/f/general-discussion/101098/i-have-a-problem-with-snmp-communty-strings-on-the-utm

Was this article helpful?
3 out of 3 found this helpful
Have more questions? Submit a request