Title

The SNMP service must require the use of a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods. (Cat II impact)

Discussion

The SNMP service must use SHA-1 or a FIPS 140-2 approved successor for authentication and integrity.

Check Content

Determine if the SNMP service uses a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods. If it does not, this is a finding.

Fix Text

Configure the SNMP service to use a FIPS 140-2 approved cryptographic hash algorithm as part of its authentication and integrity methods.

Additional Identifiers

Rule ID: SV-26117r1_rule

Vulnerability ID: V-22448

Group Title: GEN005306

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.