Define the settings for inbound and outbound SNMP traffic. Only users without spaces in their user names can perform SNMP queries.
From the Trellix ESM dashboard, click
.png "menu.png")
and select More Settings.On the system navigation tree, select the device and click
.png "Settings.png")
.Click SNMP Configuration.
SNMP Requests tab:
Set the requests to be accepted.
Indicate whether to allow SNMP traffic:
For SNMP version 1 and version 2 traffic, set the community string.
For SNMP version 3 traffic, select the security level, authentication protocol, and privacy protocol.
Show the IP addresses that the device allows or considers trusted. You can add new addresses and edit or remove existing ones. The IP address can include a mask.
Note
A trusted IP address must be present.
View the Trellix MIB, which defines the object identifiers (OIDs) for each object or characteristic of interest.
SNMP Traps tab:
Set the port where the cold/warm trap traffic, block list entry, and link up/link down traffic passes.
Send Link Up and Link Down traps. If you select this feature and are using multiple interfaces, you are notified when an interface goes down and when it comes back up.
Note
Cold/warm trap traffic is automatically allowed. A cold start trap is generated when there is a hard shut-down or hard reset. A warm start trap is generated when you reboot the system.
Send an SNMP trap when the database (cpservice, IPSDBServer) goes up or down.
Send an SNMP trap when a log is not written to the log table.
Set the system profile names where you want the notifications sent. The table shows all available SNMP trap profiles on the system.