Results 1 to 4 of 4

Thread: audit checklist for 3com switches

  1. #1
    Junior Member
    Join Date
    Oct 2005
    Posts
    1

    audit checklist for 3com switches

    hi folks,

    Anyone out there has an audit checklist that covers 3COM switches?

    Thank you in advance.
    Lorraine

  2. #2
    Senior Member
    Join Date
    Jun 2003
    Posts
    188
    Hi lorraine welcome to AO. For switches ensure the following:-

    1. Change the default telnet or ssh login passwords.
    2. Read the Switch manual to gaurd against active sniffing in a network.

  3. #3
    THE Bastard Sys***** dinowuff's Avatar
    Join Date
    Jun 2003
    Location
    Third planet from the Sun
    Posts
    1,253
    By default on all 3coms the stmp group public is enabled and has no password. Either disable or add a password. stmp traps are the easiest way to sniff a network fairly undected (if done right)

    Edit: That's SNMP not stmp
    09:F9:11:02:9D:74:E3:5B8:41:56:C5:63:56:88:C0

  4. #4
    OK, combining suggestions from above:

    1. Current BIOS version.
    2. Current Firmware version
    3. Manger Password (hardened)
    4. Operator Pasword (hardened)
    5. Change Public community to match network SNMP community
    6. Password protect SNMP communities

    Hmmm ... well, this should be a good start.

    OOpsie!

    7. Document versions, configuration and settings.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •