Configure SNMP community and traps

Create an SNMPv1 and SNMPv2c community by adding an SNMP manager and allow the traffic.

Introduction

In this example, we show how to do the following:

• Configure Sophos Firewall as an SNMP agent if you haven't already done it.
• Configure SNMPv1 and SNMPv2c managers.
• Allow SNMP traffic for the zone to which SNMP managers belong.
• Allow Sophos Firewall to send SNMP alerts.

Configure Sophos Firewall as an SNMP agent

Allow Sophos Firewall to act as an SNMP agent. It uses the standard ports used by SNMP agents and users or managers.

1. Go to Administration > SNMP.
2. Select Enable SNMP agent.
3. Enter the Location and Contact person.

4. Click Apply.

   Here's an example:

   

Configure an SNMPv1 and v2c community

Specify the IP address of the SNMP manager. Sophos Firewall sends SNMPv1 and SNMPv2c traps to managers.

1. Go to Administration > SNMP. Scroll down to SNMPv1/v2c and select Add.
2. Enter a Name.
3. Enter a Community string.
4. Select IPv4 or IPv6.
5. Specify the IP address, for example, 50.50.50.10.
6. Select Accept queries and Send traps.

7. Click Apply.

   Here's an example:

   

Allow SNMP traffic and alerts

Allow SNMP traffic for the zone to which SNMP users and managers belong. Additionally, allow Sophos Firewall to send SNMP alerts.

1. Go to Administration > Device access and select the zones from which SNMP users and managers can send and receive SNMP traffic.

   Here's an example:

   

2. Go to System services > Notification list.

3. Turn on SNMP traps.

4. Turn on SNMP for the alerts you want to send.

   Here's an example:

   

More resources

• Supported SNMP MIBs
• Sophos MIB