Query

On the Management > SNMP > Query page you can enable the usage of SNMP queries.

To configure SNMPSimple Network Message Protocol queries, proceed as follows:

1. Enable SNMP Queries.

   Click the toggle switch.

   The sections SNMP Version and SNMP Access Control become editable.

2. Select the SNMP version.

   In the SNMP Version section, select a version from the drop-down list. SNMP version 3 requires authentication.

3. Select allowed networks.

   Networks listed in the Allowed Networks box are able to query the SNMP agent running on Sophos UTM. You should only add networks to the Allowed Networks that will query the SNMP agent, it is not advisable to add any none private networks to the list. Note that the access is always read-only.

   • Community string: When using version 2, enter a community string. An SNMP community string acts as a password that is used to protect access to the SNMP agent. By default, the SNMP community string is "public", but you can change it to any setting that best suits your needs.

     Note – Allowed characters for the community string are: (a-z), (A-Z), (0-9), (+), (_), (@), (.), (-), (blank).

   • Username/Password: When using version 3, authentication is required. Enter a username and password (second time for verification) to enable the remote administrator to send queries. The password must have at least eight characters. SNMP v3 uses SHA for authentication and AES for encryption. Note that username and password are used for both of them.

4. Click Apply.

   Your settings will be saved.

Furthermore, you can enter additional information about Sophos UTM.

Device Information

The Device Information text boxes can be used to specify additional information about Sophos UTM such as its name, location, and administrator. This information can be read by SNMP management tools to help identify Sophos UTM.

Note – All SNMP traffic (protocol version 2) between Sophos UTM and the Allowed Networks is not encrypted and can be read during the transfer over public networks.

Astaro Notifier MIB

This section allows you to download the Astaro MIBManagement Information Base which contains the definitions of the Sophos UTM notification SNMP traps. For historical reasons the MIB uses the Astaro Private Enterprise Code (SNMPv2-SMI::enterprises.astaro).